On Fri, Dec 22, 2000 at 01:30:50PM +0100, Guido Guenther wrote: > Hi, > ippl shows frequent access attempts to ports 563[456] tcp in our > subnet originating from machines all over the world. netstat and > lsof show no programs listening on these ports. A websearch didn't > reveal any usefull information regarding these port numbers. Any ideas? > -- Guido
http://www.snort.org/Database/portsearch.asp according to this, it's nntp over ssl (or snntp). btw, that is one hell of a useful page :) -- -m When you are having a bad day, and it seems like everybody is trying to piss you off, remember that it takes 42 muscles to produce a frown, but only 4 muscles to work the trigger of a good sniper rifle.