Snort mailing list archives
what is rstatd?
From: Shashank Bhide <shashank () biochem okstate edu>
Date: Fri, 25 Apr 2003 09:44:43 -0500
Hi all, The snort on my box picks up the following :Apr 20 05:53:00 unknown snort[24580]: [ID 702911 auth.alert] [1:583:1] RPC portmap request rstatd [Classification: Attempted
Information Leak] [Priority: 3]: {UDP} XX.XX.XX.XX:40204 -> XX.XX.XX.255:111 This is a broadcast to the subnet. Could anyone throw some light on this ? Thanks Shashank ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- what is rstatd? Shashank Bhide (Apr 25)
- Re: what is rstatd? Matt Kettler (Apr 25)
- FreeBSD-5 / Snort 2.0 Installation Document David Markle (Apr 25)
- Re: what is rstatd? Matt Kettler (Apr 25)