[Snort-users] Port 10008/tcp ?

Stacey Conrad Stacey.Conrad at ...2033...
Tue May 15 12:06:54 EDT 2001


Tudor,
There's been some talk of this on the intrusions at ...2034... mailing list.
Check out the archives at
http://www.incidents.org/archives/intrusions/date1.html.  They said that
10008 was the port for a backdoor from one of the recent worms (lion, I
believe).

Hope this helps

/stacey/


-----Original Message-----
From: Tudor Panaitescu [mailto:tpanaitescu at ...2032...]
Sent: Tuesday, May 15, 2001 11:46 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Port 10008/tcp ?


Hello everyone !

Does anybody know what is this port, 10008/tcp for ?

I've got some attempts, allways 2 at a time from the same source address.

TIA,
Tudor



_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list