On 28/03/07, alan c <[EMAIL PROTECTED]> wrote: > I am mystified though about the service names (and associated ports) > at the time. For example one was Gatecrasher (service name) and this > was trying to go out on port 6969 and google indicates this is a > (windows) trojan.
Hi Alan, I can't answer your question about the blocked connections on the firewall. Regarding the mystery service names: for something like BitTorrent or FTP (yes I know you're not using it, but the same argument applies) that opens multiple connections, the local port number that is opened will quite probably flag up as something that is registered to a high number. Service names are mainly for listening ports. It doesn't actually mean that you have a trojan - it's unlikely unless you've managed to infect a Wine installation with one! You might be able to identify the connection more reliably using something like Wireshark (formerly known as ethereal), which looks at the traffic passing over the connection rather than just looking for the port number. Hopefully, I've put your mind at rest. If you're still confused, let me know and I'll try to clear it up further. Hwyl, Neil. -- ubuntu-uk@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-uk https://wiki.kubuntu.org/UKTeam/
