Re: What is this packet? Going to M$

[Kenton Smith <ksmith () chartwelltechnology com>]

My guess is these machines have the auto-update functionality turned on
and are calling home.  I don't trust Microsoft's updates enough to run
this on my network so I have it configured to never check, you may have
other policies.

Kenton Smith

On Thu, 2003-03-20 at 02:20, pauls () utdallas edu wrote:

> This is a packet going from a host on our network to port 80 at
> 207.46.131.156 which is ntservicepack.microsoft.com.  I've seen these
> pretty regularly, and I'm wondering if anyone else is seeing them as
> well?
>
> Appears to me that M$ is taking inventory.......
> <snip>

Kenton Smith, GSEC
Systems Administrator
Chartwell Technology Inc.
700, 407 2 St. S.W. 
Calgary, AB T2P 2Y3 
CANADA 
P 403 261-6619 
F 403 237-5816 
E ksmith () chartwelltechnology com
W www.chartwelltechnology.com



-------------------------------------------------------
This SF.net email is sponsored by: Tablet PC.  
Does your code think in ink? You could win a Tablet PC. 
Get a free Tablet PC hat just for playing. What are you waiting for? 
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users