Re: schoolbus trojan not listed as threat

"George A. Theall" <[email protected]>
Newsgroups gmane.comp.security.nessus.general
Message-ID <[email protected]>
On Apr 30, 2008, at 2:39 PM, Sergio Castro wrote:

> I just ran a scan on a client's site and Nessus found this: "port  
> schoolbus (54321/tcp)".

In addition to what Michel said, it's probably worthwhile mentioning  
that these port descriptions are hardcoded into the services. 
{tcp,txt,udp} files installed by Nessus. Nessus was unable to detect  
the actual service running on the port, although I expect if there  
was, say, an SSH server the report would tell you that even though the  
port would be described as "schoolbus".


George
-- 
[email protected]



_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.