Re: Ports 41508, 41524 & 41531

[Joakim.Aronius () CA COM (Aronius, Joakim)]

Thanks for your replies, yes it seems like its the InocuLan a-virus that
generates the traffic.
Also want to appologise for resending the question, our exchange server
evidently thought it was a good idea to resend all mails that were sent a
few days ago...

/Joakim
> -----Original Message-----
> From: Aronius, Joakim [mailto:Joakim.Aronius () CA COM]
> Sent: den 9 februari 2000 16:58
> To: INCIDENTS () SECURITYFOCUS COM
> Subject: Ports 41508, 41524 & 41531
>
>
> Im running Computer Associates VPN administrator and just now
> i get a lot of
> rule violations on broadcasts on ports 41508, 41524 & 41531
> from seamingly
> random IP's with ports just above 1024. The rule violation
> pops up at a rate
> of about 2/3 per minute.
>
> I havn't found these high ports in any list, so, anyone has a clue?
>
> Thanks,
> /Joakim Aronius