RE: patternmatch for scan

From: Daniel Brady (daniel.bradyat_private)
Date: Tue Feb 22 2000 - 08:22:28 PST

Next message: Troy Henley: "RE: Linux Proxy Server ?"

Previous message: John Hein: "PIX to Check Point Firewall Help"
Maybe in reply to: Kenneth_W_Foxat_private: "patternmatch for scan"
Next in thread: Zimmermann, Rolf: "RE: patternmatch for scan"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

3128 is the default port for the squid web cache.  8080 is the port used by
one of the win based proxies (can't remember which one off hand)
Daniel

-----Original Message-----
From: Kenneth_W_Foxat_private [mailto:Kenneth_W_Foxat_private]
Sent: Saturday, February 19, 2000 1:56 PM
To: firewall-wizardsat_private
Subject: patternmatch for scan

Is anyone familiar with an attack or probe which begins or ends with
scanning
only ports 3128 & 8080 on a target box? I've been seeing alot of this lately
in
various places.

Ken

Next message: Troy Henley: "RE: Linux Proxy Server ?"
Previous message: John Hein: "PIX to Check Point Firewall Help"
Maybe in reply to: Kenneth_W_Foxat_private: "patternmatch for scan"
Next in thread: Zimmermann, Rolf: "RE: patternmatch for scan"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:06:40 PDT