OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] Port 8041 Syn flood

From: Jackson McKinley (saintausdf.lonestar.org)
Date: Tue Aug 23 2005 - 18:16:15 CDT

Dshield is showing a down swing.. have you got packet captures?

http://isc.sans.org/port_details.php?port=8041&repax=1&tarax=2&srcax=2&percent=N&days=70

On Tue, Aug 23, 2005 at 09:39:39AM +0530, Rajesh wrote:
> Hi All,
>
> Is anyone else seeing a very large increase of SYN packets coming to
> port 8041 over the last couple of days. It is coming from different
> addresses to most of my machines in separate networks. I couldn't find
> information about any services that use port 8041 yet. So for now I am
> assuming that this is just a SYN flood. Can anyone else shed some more
> light into this?
>
> Thanks
> Rajesh
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

--
saintausdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/