[Snort-sigs] SID 524 submission

Chris Green cmg at ...435...
Thu Mar 28 08:15:05 EST 2002

David Wilburn <bug at ...270...> writes:

> I've always been a bit unclear on this sig.  Don't some versions of IRIX
> listen on port 0 for some bizarre reason?

Maybe but could you be confusing 0 with tcpmux on port 1?
Chris Green <cmg at ...435...>
 "Not everyone holds these truths to be self-evident, so we've worked
                  up a proof of them as Appendix A." --  Paul Prescod

More information about the Snort-sigs mailing list