[Dshield] Unknown.level3.net:80 attempted to attack myhusband's pc

John Hardin johnh at aproposretail.com
Wed Sep 4 01:47:42 GMT 2002


On Tue, 2002-09-03 at 13:10, Coxe, John B. wrote:
> But this is outbound from d2f2t6 to level3.net, most likely with Norton
> AntiVirus realtime scan (rtvscan.exe) accounting for the LISTENING at seq no
> 2068.  Look on any Windows desktop running rtvscan.exe and the netstat
> output will show the same pairing for all established connections.

Does Windows permit you to initiate an outbound connection with a source
port that something is already LISTENing on? After a quick test with
netcat, Linux apparently does not.

-- 
John Hardin                                   <johnh at aproposretail.com>
Internal Systems Administrator                    voice: (425) 672-1304
Apropos Retail Management Systems, Inc.             fax: (425) 672-0192
-----------------------------------------------------------------------
 "To disable the Internet to save EMI and Disney is the moral
  equivalent of burning down the library of Alexandria to ensure the
  livelihood of monastic scribes."
                                    -- John Ippolito of the Guggenheim
-----------------------------------------------------------------------
 106 days until The Two Towers




More information about the list mailing list