RE: Port 10008/tcp ?

[Stacey Conrad <Stacey.Conrad () millersville edu>]

Tudor,
There's been some talk of this on the intrusions () incidents org mailing list.
Check out the archives at
http://www.incidents.org/archives/intrusions/date1.html.  They said that
10008 was the port for a backdoor from one of the recent worms (lion, I
believe).

Hope this helps

/stacey/


-----Original Message-----
From: Tudor Panaitescu [mailto:tpanaitescu () colorcon com]
Sent: Tuesday, May 15, 2001 11:46 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Port 10008/tcp ?


Hello everyone !

Does anybody know what is this port, 10008/tcp for ?

I've got some attempts, allways 2 at a time from the same source address.

TIA,
Tudor



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users