From owner-freebsd-security Mon Oct 8 19:29: 2 2001 Delivered-To: freebsd-security@freebsd.org Received: from mb2.mgt.ncu.edu.tw (mb2.mgt.ncu.edu.tw [140.115.83.202]) by hub.freebsd.org (Postfix) with ESMTP id 3BBF537B405 for ; Mon, 8 Oct 2001 19:28:58 -0700 (PDT) Received: from localhost (clking@localhost) by mb2.mgt.ncu.edu.tw (8.11.0/8.11.0) with ESMTP id f992QGf66181 for ; Tue, 9 Oct 2001 10:26:18 +0800 (CST) (envelope-from clking@mb2.mgt.ncu.edu.tw) Date: Tue, 9 Oct 2001 10:26:16 +0800 (CST) From: "Charlie C.L. King" To: freebsd-security@FreeBSD.ORG Subject: any idea on udp port 8? (fwd) Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hello, everybody: I'm a newbie adm. in bsd and managing my own box. Does any one have any idea what service runs on udp port 8? I'm currently running portsentry on my freebsd box, and recently got lots of attack alerts on udp port 8; it goes like this: Oct 7 16:09:17 ncumis portsentry[6306]: attackalert: Connect from host: hostname/ip_address to UDP port: 8 Oct 5 17:45:57 ncumis portsentry[6306]: attackalert: Connect from host: hostname/ip_address to UDP port: 8 I've tried to look into the /etc/services file under red-hat linux and my freebsd, neither of which is it recorded. Thus still i've got no idea about what this means. Any response or suggestion would be appreciated. -- With regards Lord Ouch To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message