Re: Port 8041 Syn flood

[Jackson McKinley <saintau () sdf lonestar org>]

Dshield is showing a down swing..  have you got packet captures?

http://isc.sans.org/port_details.php?port=8041&repax=1&tarax=2&srcax=2&percent=N&days=70


On Tue, Aug 23, 2005 at 09:39:39AM +0530, Rajesh wrote:
> Hi All,
>
> Is anyone else seeing a very large increase of SYN packets coming to 
> port 8041 over the last couple of days. It is coming from different 
> addresses to most of my machines in separate networks. I couldn't find 
> information about any services that use port 8041 yet. So for now I am 
> assuming that this is just a SYN flood. Can anyone else shed some more 
> light into this?
>
> Thanks
> Rajesh
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

-- 
saintau () sdf lonestar org
SDF Public Access UNIX System - http://sdf.lonestar.org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/