|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
From: Ryan Russell (ryan
securityfocus.com)Date: Thu Mar 15 2001 - 12:08:02 CST
On Wed, 14 Mar 2001, Phil Wood wrote:
> Around 32% of all alerts for today fall in to the port 53 to 137. I know for
> a fact that the destination hosts (in our address space) are not sending packets
> from 137 to 53.
That's most likely NT DNS servers falling back to NetBIOS trying to look
up names.
Ryan
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]