Re: strange udp
"lola marais" <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
kyle, thanks for you opnion. that is was what i was thinking but need to confirm my thoughts rgs >From: Kyle Maxwell <[email protected]> >Reply-To: "Intrusions List (GCIA Practicals)" <[email protected]> >To: "Intrusions List (GCIA Practicals)" <[email protected]> >Subject: Re: [Intrusions] strange udp >Date: Wed, 25 Aug 2004 11:04:36 -0500 > >On Tue, 24 Aug 2004 17:45:56 +0200, lola marais <[email protected]> >wrote: > > Can anyone help identify this traffic? Any suggestions are welcome. > > > > 17:07:11.058632 my.host.4827 > 64.246.16.11.4665: [udp sum ok] udp 18 >(ttl > > 125, id 49700, len 46) > >My first thought would be that it might be eDonkey traffic? Any >captures of the packets themselves? > >-- >Kyle Maxwell >[[email protected]] >_______________________________________________ >Intrusions mailing list >[email protected] >http://www.dshield.org/mailman/listinfo/intrusions _________________________________________________________________ Need your own online space? Get FREE MSN Groups membership! http://groups.msn.com/people.msnw?pgmarket=en-za _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions