[Snort-users] RE: 515/tcp scans on the rise

Dragos Ruiu dr at ...381...
Sat Nov 18 03:30:07 EST 2000


On Fri, 17 Nov 2000, Christopher Cramer wrote:
> port 515 is the LPD port.  There are often new exploits for LPD.  I have
> heard of, but haven't checked out the details, for a new LPRng exploit.
> Perhaps this is what you are seeing probes for.

alternatively.... maybe someone is looking for old solaris boxes....
There were some remote printer exploits there...

cheers,
--dr



More information about the Snort-users mailing list