Re: Outbound Connections

["Joel Esler" <eslerj () gmail com>]

What are the 'strange unknown IP address spaces' that the packets are going to?

J

On 6 Jul 2006 17:33:11 -0000, No () email com <No () email com> wrote:
> The [System] process (PID 4 on this Windows XP Pro Box) is making strange outbound connections to unknown IP address 
> spaces on one of our machines.  It tries to connect to port 139 and 445. Is there any way to figure out what is causing 
> the system process to do this? The connections do not seem to be successful.  The Packet trace shows the outbound SYS 
> and then nothing.  Any help would be appreciated!
>
>
>
> Thanks!
>
> ------------------------------------------------------------------------------
> This List Sponsored by: Black Hat
>
> Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas.
> World renowned security experts reveal tomorrow's threats today. Free of
> vendor pitches, the Briefings are designed to be pragmatic regardless of your
> security environment. Featuring 36 hands-on training courses and 10 conference
> tracks, networking opportunities with over 2,500 delegates from 40+ nations.
>
> http://www.blackhat.com
> ------------------------------------------------------------------------------


--
--Joel

------------------------------------------------------------------------------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas. 
World renowned security experts reveal tomorrow's threats today. Free of 
vendor pitches, the Briefings are designed to be pragmatic regardless of your 
security environment. Featuring 36 hands-on training courses and 10 conference 
tracks, networking opportunities with over 2,500 delegates from 40+ nations. 

http://www.blackhat.com
------------------------------------------------------------------------------