Security Incidents mailing list archives

Re: RE: Bizarre traffic

From: selfinnoculation () yahoo com
Date: 23 Feb 2006 13:44:16 -0000

I am not too sure if I can agree with you at this moment, David. It is indeed weird that traffic is only heading 
towards the HTTPS port.

Have you considered running a netmon service on that source machine to see which application is actually sending out 
requests for HTTPS? You might be able to nail the culprit there.

Good luck.

Current thread:

Bizarre traffic David Gillett (Feb 10)
- Re: Bizarre traffic Brian Rectanus (Feb 10)
  - RE: Bizarre traffic David Gillett (Feb 13)
- RE: Bizarre traffic David Gillett (Feb 27)
- <Possible follow-ups>
- Re: RE: Bizarre traffic mosquitooth (Feb 17)
- Re: RE: Bizarre traffic selfinnoculation (Feb 23)
  - Re: RE: Bizarre traffic Ramez Hanna (Feb 23)
    - Re: RE: Bizarre traffic Ansgar -59cobalt- Wiechers (Feb 24)
    - Re: RE: Bizarre traffic Dick St.Peters (Feb 24)