TFTP & netconsole support
Vassilis Virvilis <[email protected]>
| Newsgroups | gmane.network.guarddog |
|---|---|
| Message-ID | <[email protected]> |
I have posted this repeatedly and I never get an answer
why are not good enough for inclusion.
Please explain
Thanks
<protocol name="tftp">
<longname>TFTP - Trivial File Transfer Protocol</longname>
<description>A Very simple protocol used to transfer files during the boot ti
diskless clients.</description>
<classification class="net"/>
<pragma name="guarddog">ip_conntrack_tftp</pragma>
<network>
<udp source="client" dest="server" direction="both">
<dest><port portnum="69"/></dest>
</udp>
</network>
<security threat="high" falsepos="low"/>
<reference href="http://www.robertgraham.com/pubs/firewall-seen.html">
FAQ: Firewall Forensics (What am I seeing?)</reference>
</protocol>
<protocol name="netconsole">
<longname>netconsole</longname>
<description>A protocol used for kernel debugging.</description>
<network>
<udp source="client" dest="server" direction="both">
<source><port portnum="6665"/></source>
<dest><port portnum="6666"/></dest>
</udp>
</network>
<security threat="high" falsepos="low"/>
<reference href="http://www.robertgraham.com/pubs/firewall-seen.html">
FAQ: Firewall Forensics (What am I seeing?)</reference>
</protocol>
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click