Re: strange udp
Kyle Maxwell <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 24 Aug 2004 17:45:56 +0200, lola marais <[email protected]> wrote: > Can anyone help identify this traffic? Any suggestions are welcome. > > 17:07:11.058632 my.host.4827 > 64.246.16.11.4665: [udp sum ok] udp 18 (ttl > 125, id 49700, len 46) My first thought would be that it might be eDonkey traffic? Any captures of the packets themselves? -- Kyle Maxwell [[email protected]] _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions