Security Incidents: Re: Port 33434 and decoy-scanning

[ryan () SECURITYFOCUS COM (Ryan Russell)]

> Don't know the what or why but have been seeing the same traffic for
> about week, same source addresses.  The source ports are the same each
> pass, and occurs about the same time each day for a period of an hour or
> so.  The pattern is traceroute like, generally 3 packets with TTL=1 followed
> by 1 to 3 packets with TTL=2.
> --
That's traceroute.

                                Ryan