Snort mailing list archives

Re: Strange UDP Packets


From: Mipam <mipam () ibb net>
Date: Tue, 26 Feb 2002 04:55:53 +0100

I have been noticing at regular intervals UDP packets
internal.net 47474 -> 255.255.255.255 47474

I have noticed this was asked on the FW-1 mailling list like 2 years 
ago but there is nothing else on this

Hmm i also found nothing on this on iana.
Could be that some ddos clients listening to such a port
Sometimes client who's been hacked have a daemon installed
listening to such a port and somebody is scanning the network to
check whether any machine are listening to abuse them.
Bye,

Mipam.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: