Re: Smoothwall logs showing many hits on port 2316

Dan Gordon <[email protected]> Fri, 19 Nov 2004 12:16:05 -0500
Newsgroups gmane.comp.security.firewalls.smoothwall.general
Organization TNLC
Message-ID <[email protected]>
On Friday 19 November 2004 01:54 am, Dan Gordon wrote:
> Im not concerned about this as much as im wondering if its a worm of
> some kind.  I have noticed for the past few days that almost all the
> firewall logs show connection attempts to port 2316 on the red nic
> even though the source ip and ports are never the same.
> Is this a known worm/virus or has my smoothie gone silly on me?
>

OK now this is starting to worry me a bit,  I'm only seeing attempted 
connections to this port 2316 in the red nic and lots of them from all 
different source address and ports.  This port is apparently used for 
the service sent-lm or sent licence manager.
Any ideas ?

Regards,
Dan Gordon
-- 
Fri Nov 19 12:12:13 EST 2004
 12:12:13 up 23:03,  2 users,  load average: 0.06, 0.05, 0.07
Innocence ends when one is stripped of the delusion that one likes 
oneself.
		-- Joan Didion, "On Self Respect"
_______________________________________________
gpl mailing list
[email protected]
http://lists.smoothwall.org/mailman/listinfo/gpl

SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall