Home page logo
/

nanog logo nanog mailing list archives

Re: QAZ probes from webtv?
From: Dan Hollis <goemon () sasami anime net>
Date: Tue, 3 Oct 2000 19:05:25 -0700 (PDT)


On Tue, 3 Oct 2000, John Fraizer wrote:
So, Dan's ACL was trapping any TCP traffic destined to 7597 and not just
TCP SYN?

Yes, although out of 50 million packets, the webtv servers/clients were
the only ones to *consistently* choose 7597 over the span of several days,
at different times of day and night.

I've got better ACLs now.

-Dan




  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault