Recent worms have been known to hit port 515, there's an vulnerability in
lprng which enables an attacker to execute arbitrary code. I assume these
packets are the result of the recent worms.
On Sat, Jun 30, 2001 at 10:13:01PM +0300, Cedar Cox wrote:
>
> What is one to th
A good reference for FW monitoring:
http://www.linuxsecurity.com/resource_files/firewalls/firewall-seen.html
Chen Naor
Lilux Sys.
- Original Message -
From: "Cedar Cox" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, June 30, 2001 9:13 PM
Subject: port
On Sat, Jun 30, 2001, Cedar Cox wrote about "port 515":
>
> What is one to think of this? These "random" packets have hit my firewall
> on port 515 recently.. comments?
/home/nyh$ grep 515 /etc/services
printer 515/tcp spooler # line printe
What is one to think of this? These "random" packets have hit my firewall
on port 515 recently.. comments?
-- Attached file included as plaintext by Listar --
-- File: log.txt
Jun 26 22:01:20 Packet log: PROTO=6 64.123.230.249:58963 L=60 S=0x00 I=18619 F=0x4000
T=47 SYN (#23)
Ju
