RE: Why would my machine do this?

From: Jose Nazario (joseat_private)
Date: Fri Feb 08 2002 - 09:29:32 PST

Next message: TCG CSIRT: "Steady increase in ssh scans"

Previous message: Bill Royds: "RE: Why would my machine do this?"
In reply to: Bill Royds: "RE: Why would my machine do this?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, 7 Feb 2002, Bill Royds wrote:

> Is one of the machines a SGI Irix machine. SGI uses port 1 for service
> multiplexing and this may be a communication from the service
> multiplexor. It can be pretty chatty with it.

1/UDP is not used by those . 1/TCP is TCPmux (RFC 1078) to multiplex
services. UDP doesn't use that TCPmux service for the same purposes.

you are right in that several SGI specific tools use TCPmux (1/TCP). but
they're TCP only.

____________________________
jose nazario						     joseat_private
	      	     PGP: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
				       PGP key ID 0xFD37F4E5 (pgp.mit.edu)



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: TCG CSIRT: "Steady increase in ssh scans"
Previous message: Bill Royds: "RE: Why would my machine do this?"
In reply to: Bill Royds: "RE: Why would my machine do this?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Feb 08 2002 - 15:59:44 PST