Re: Smoothwall logs showing many hits on port 2316
Dan Gordon <[email protected]> Fri, 19 Nov 2004 12:16:05 -0500
| Newsgroups | gmane.comp.security.firewalls.smoothwall.general |
|---|---|
| Organization | TNLC |
| Message-ID | <[email protected]> |
On Friday 19 November 2004 01:54 am, Dan Gordon wrote: > Im not concerned about this as much as im wondering if its a worm of > some kind. I have noticed for the past few days that almost all the > firewall logs show connection attempts to port 2316 on the red nic > even though the source ip and ports are never the same. > Is this a known worm/virus or has my smoothie gone silly on me? > OK now this is starting to worry me a bit, I'm only seeing attempted connections to this port 2316 in the red nic and lots of them from all different source address and ports. This port is apparently used for the service sent-lm or sent licence manager. Any ideas ? Regards, Dan Gordon -- Fri Nov 19 12:12:13 EST 2004 12:12:13 up 23:03, 2 users, load average: 0.06, 0.05, 0.07 Innocence ends when one is stripped of the delusion that one likes oneself. -- Joan Didion, "On Self Respect" _______________________________________________ gpl mailing list [email protected] http://lists.smoothwall.org/mailman/listinfo/gpl SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall