[Snort-users] Unknown port traffic....

Clifford Durbin CDurbin at ...6996...
Thu Sep 26 14:04:06 EDT 2002


Brian,

Thanks for the information. I stopped the IPSec service but still get the
same information. Not sure what service would be controlling h.323 though I
am looking. 

-cfd

-----Original Message-----
From: Brian F. Vaughan [mailto:bvaughan at ...6569...]
Sent: Thursday, September 26, 2002 12:19 PM
To: Clifford Durbin; snort-users at lists.sourceforge.net
Subject: RE: [Snort-users] Unknown port traffic....


Clifford,

Port 1120 is used by Win2k for IPSec, this is the most likely cause for the
port activity you are seeing.

Brian Vaughan
IT Administrator
Wireless Generation, Inc.


-----Original Message-----
From: Clifford Durbin [mailto:CDurbin at ...6996...]
Sent: Thursday, September 26, 2002 2:35 PM
To: 'snort-users at lists.sourceforge.net'
Subject: [Snort-users] Unknown port traffic....


Can anybody give me some insight what the heck is using port 1120 and 1900?


More information about the Snort-users mailing list