Re: RE: Bizarre traffic

[email protected] 23 Feb 2006 13:44:16 -0000

Newsgroups	gmane.comp.security.incidents
Message-ID	<[email protected]>

I am not too sure if I can agree with you at this moment, David. It is indeed weird that traffic is only heading towards the HTTPS port.

Have you considered running a netmon service on that source machine to see which application is actually sending out requests for HTTPS? You might be able to nail the culprit there.

Good luck.

lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.