From owner-freebsd-isp Fri Jan 7 10:27:28 2000 Delivered-To: freebsd-isp@freebsd.org Received: from hotmail.com (law2-f56.hotmail.com [216.32.181.56]) by hub.freebsd.org (Postfix) with SMTP id 2C96E15A0F for ; Fri, 7 Jan 2000 10:27:26 -0800 (PST) (envelope-from fjcameron@hotmail.com) Received: (qmail 74051 invoked by uid 0); 7 Jan 2000 18:27:25 -0000 Message-ID: <20000107182725.74050.qmail@hotmail.com> Received: from 147.160.99.35 by www.hotmail.com with HTTP; Fri, 07 Jan 2000 10:27:25 PST X-Originating-IP: [147.160.99.35] From: "Frank Cameron" To: freebsd-isp@freebsd.org Subject: Re: Uknown TCP/IP Ports Date: Fri, 07 Jan 2000 13:27:25 EST Mime-Version: 1.0 Content-Type: text/plain; format=flowed Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I was granted some more information about the packets: they were all UDP directed broadcasts. I found a newsgroup posting that listed 41524 specifically as being popular for a modified smrf attack. -Frank > >Does anybody know if anything special uses ports 41524 or 62638. I've >checked a few trojan ports lists with no success. > >-Frank > ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message