[Snort-users] Strange UDP Packets
bvaughn at ...5085...
Tue Feb 26 06:26:08 EST 2002
Find out which host on your internal network is emanating the
these packets and use a netstat,lsof,sockstat,ps aux equivalent to find
out the tools that are running on the host. If you put enough effort in
it you should be able to discover which application on the host is
sending out these packets.
From: Jason Robertson [mailto:jason at ...3161...]
Sent: Monday, February 25, 2002 10:22 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Strange UDP Packets
I have been noticing at regular intervals UDP packets internal.net 47474
-> 255.255.255.255 47474
I have noticed this was asked on the FW-1 mailling list like 2 years
ago but there is nothing else on this
Now at the Nation Research Council.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 3788 bytes
Desc: not available
More information about the Snort-users