[Snort-users] what is rstatd?

Shashank Bhide shashank at ...9016...
Fri Apr 25 07:44:11 EDT 2003

Hi all,
    The snort on my box picks up the following :

Apr 20 05:53:00 unknown snort[24580]: [ID 702911 auth.alert] [1:583:1] RPC 
portmap request rstatd [Classification: Attempted
Information Leak] [Priority: 3]: {UDP} XX.XX.XX.XX:40204 -> XX.XX.XX.255:111

This is a broadcast to the subnet. Could anyone throw some light on this ?

More information about the Snort-users mailing list