[Dshield] popups to UDP:1026

Jeff Kell jeff-kell at utc.edu
Tue Aug 19 02:27:08 GMT 2003


John Sage wrote:

> Doesn't take 'em long, does it :-/
> 
> 
> input: snort.log.1061144222
> filter: ip and ( dst host 12.82.158.246 and dst port 1026 )

Were these preceeded by a portmapper call (udp/135) ?

Jeff




More information about the list mailing list