AW: [Dshield] Dropoff in TCP:17300?

Graham K. Dodd g.dodd at falk-ross.de
Tue Jun 10 06:40:10 GMT 2003


John,
	over here (Germany) they are still coming in, but if it follows the normal
trend then I can expect them to start dropping off here in the next two
weeks.
We are usually a week behind you guys then drag it on for a while, but you
do provide a great early warning system for us :-)

Graham

> -----Ursprungliche Nachricht-----
> Von: list-bounces at dshield.org [mailto:list-bounces at dshield.org]Im
> Auftrag von John Sage
> Gesendet: Samstag, 7. Juni 2003 21:45
> An: list at dshield.org
> Betreff: [Dshield] Dropoff in TCP:17300?
>
>
> Is it just me, or has TCP:17300 gone quiet:
>
> Total packets to port 17300 in alert.full-Jun.01.06:00: 662
> Total packets to port 27374 in alert.full-Jun.01.06:00: 7
>
>
> Total packets to port 17300 in alert.full-Jun.02.05:29: 334
> Total packets to port 27374 in alert.full-Jun.02.05:29: 51
>
> Total packets to port 17300 in alert.full-Jun.03.05:01: 249
> Total packets to port 27374 in alert.full-Jun.03.05:01: 5
>
> Total packets to port 17300 in alert.full-Jun.04.05:18: 37
> Total packets to port 27374 in alert.full-Jun.04.05:18: 0
>
> Total packets to port 17300 in alert.full-Jun.05.06:15: 5
> Total packets to port 27374 in alert.full-Jun.05.06:15: 0
>
> Total packets to port 17300 in alert.full-Jun.06.05:34: 31
> Total packets to port 27374 in alert.full-Jun.06.05:34: 0
>
> today:
> Ports report for /var/log/snort/alert.full
> Generated 12:30:01 (TZ -07:00) 06/07/2003
> Total packets to port 17300 in /var/log/snort/alert.full: 0
> Total packets to port 27374 in /var/log/snort/alert.full: 0
>
>
>
> - John
> --
> "You are in a twisty maze of weblogs, all alike."
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list






More information about the list mailing list