From owner-freebsd-security Sun Aug 4 9:21:25 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5551C37B400 for ; Sun, 4 Aug 2002 09:21:22 -0700 (PDT) Received: from patrocles.silby.com (d118.as6.nwbl0.wi.voyager.net [169.207.128.118]) by mx1.FreeBSD.org (Postfix) with ESMTP id E4FD743E4A for ; Sun, 4 Aug 2002 09:21:20 -0700 (PDT) (envelope-from silby@silby.com) Received: from patrocles.silby.com (localhost [127.0.0.1]) by patrocles.silby.com (8.12.5/8.12.5) with ESMTP id g74GOIB1031437; Sun, 4 Aug 2002 11:24:18 -0500 (CDT) (envelope-from silby@silby.com) Received: from localhost (silby@localhost) by patrocles.silby.com (8.12.5/8.12.5/Submit) with ESMTP id g74GOD3p031434; Sun, 4 Aug 2002 11:24:16 -0500 (CDT) X-Authentication-Warning: patrocles.silby.com: silby owned process doing -bs Date: Sun, 4 Aug 2002 11:24:13 -0500 (CDT) From: Mike Silbersack To: Ian Smith Cc: freebsd-security@FreeBSD.org Subject: Re: port 6112 ? In-Reply-To: Message-ID: <20020804112115.M31370-100000@patrocles.silby.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 5 Aug 2002, Ian Smith wrote: > Today I notice a dialup user getting and sending UDP packets on 6112, > with various IPs; looks to be a fairly steady stream of in- and outbound > traffic at about 800cps each way over, say, half-hour sessions. > > Game, trojan, or yet another messenger type thing? > > I've already checked http://www.robertgraham.com/pubs/firewall-seen.html > > Cheers, Ian 6112 is Starcraft, Warcraft 3, and probably Diablo as well. No need to be concerned. Mike "Silby" Silbersack To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message