[Dshield] Port :6666 question

Mark Lastdrager mark at pine.nl
Wed Jul 25 19:09:01 GMT 2001


At Wed, 25 Jul 2001, dshield-admin at dshield.org wrote:

>I read Ryan J Betz idea on blocking out bound :6666-:6668 traffic to see
>what would be captured by my firewall.  Well hopefully someone can tell me
>what this traffic means.
>
>Source 0.0.0.0:68  Destination 255.255.255.255:67
>
>I'm taking a guess that this is something broadcasting out for any response.
>I'd like to hunt this thing down, con some one point me in the right
>direction.

It's a DHCP client asking for an IP address..

Mark Lastdrager

--
Pine Internet BV ::  tel. +31-70-3111010 ::  fax. +31-70-3111011
PGP 92BB81D1 fingerprint 0059 7D7B C02B 38D2 A853 2785 8C87 3AF1
Today's excuse: popper unable to process jumbo kernel




More information about the list mailing list