Re: Big traffic on 412/tcp

From: Ian Stoba (ianat_private)
Date: Wed Apr 24 2002 - 09:20:29 PDT

Next message: Anton A. Chuvakin: "Re: ftp"

Previous message: gregory.kaneat_private: "ftp"
In reply to: Guido Van De Velde: "Big traffic on 412/tcp"
Next in thread: H C: "Re: Big traffic on 412/tcp"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

It appears to be used by the Direct Connect peer to peer file sharing 
program:

http://www.dac.neu.edu/dac/hdesk/pip0202.pdf

(Google is your friend!)

Cheers,

--Ian

On Wednesday, April 24, 2002, at 01:43  AM, Guido Van De Velde wrote:

> We see here in our Cisco netflow data quite a large amount of data 
> coming from 412/tcp (about 20 gbyte/day, about 1/8 of our http data). 
> It seem to me that the official use, synoptics-trap, isn't that used, 
> or am I wrong.
>
> Does anyone know what they transport on this port ?
>


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Anton A. Chuvakin: "Re: ftp"
Previous message: gregory.kaneat_private: "ftp"
In reply to: Guido Van De Velde: "Big traffic on 412/tcp"
Next in thread: H C: "Re: Big traffic on 412/tcp"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Apr 24 2002 - 09:33:43 PDT