Snort mailing list archives

what is rstatd?


From: Shashank Bhide <shashank () biochem okstate edu>
Date: Fri, 25 Apr 2003 09:44:43 -0500

Hi all,
   The snort on my box picks up the following :

Apr 20 05:53:00 unknown snort[24580]: [ID 702911 auth.alert] [1:583:1] RPC portmap request rstatd [Classification: Attempted
Information Leak] [Priority: 3]: {UDP} XX.XX.XX.XX:40204 -> XX.XX.XX.255:111

This is a broadcast to the subnet. Could anyone throw some light on this ?
Thanks
Shashank




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: