[Snort-users] snort rpc_decode

James Lay jlay at ...13475...
Wed Nov 12 11:10:02 EST 2014


On 2014-11-12 04:57, amin Salehi wrote:
> hi.
> how can i determine rpc port on windows 7 and debian linux for
> configuring rpc_decode preprocessor of snort?
> whther RPC port in windows 7 is 135?what about port 49152 to 42159?
> what about linux?how to i determine dynamic port assigned to rpc?

Packet capture the traffic..and perhaps looking at the below:

https://support.microsoft.com/kb/832017

James




More information about the Snort-users mailing list