[Dshield] Port 17300 increase

Chris Brenton cbrenton at chrisbrenton.org
Sat Dec 6 17:34:03 GMT 2003


On Sat, 2003-12-06 at 11:43, Doug White wrote:
> In the past 24 hours, I have experienced a substantial increase in Port 17300
> Probes.  According to my snort logs, this does not have the kuang virus
> signature.

Its never really gone away. I get days were I see a ton of kuang2, and
others were I see none at all. Seems to ebb and flow.

> Secondly, the dally report I receive never shows anywhere near the quantity of
> packets that are submitted daily.  In fact usually the daily report contains
> less than one-third of what is reported.

That would be a Johannes question. ;-)

C





More information about the list mailing list