[Dshield] Dropoff in TCP:17300?

John Sage jsage at finchhaven.com
Wed Jun 11 13:12:00 GMT 2003


Continuing from 06/06/03...

Context: dialup into AT&T's Seattle WA POP, 12.82.x.x class A, connect
time 24 hrs a day..

On Sat, Jun 07, 2003 at 12:44:39PM -0700, John Sage wrote:
> Is it just me, or has TCP:17300 gone quiet:
> 
> Total packets to port 17300 in alert.full-Jun.01.06:00: 662
> Total packets to port 27374 in alert.full-Jun.01.06:00: 7
> 
> Total packets to port 17300 in alert.full-Jun.02.05:29: 334
> Total packets to port 27374 in alert.full-Jun.02.05:29: 51
> 
> Total packets to port 17300 in alert.full-Jun.03.05:01: 249
> Total packets to port 27374 in alert.full-Jun.03.05:01: 5
> 
> Total packets to port 17300 in alert.full-Jun.04.05:18: 37
> Total packets to port 27374 in alert.full-Jun.04.05:18: 0
> 
> Total packets to port 17300 in alert.full-Jun.05.06:15: 5
> Total packets to port 27374 in alert.full-Jun.05.06:15: 0
> 
> Total packets to port 17300 in alert.full-Jun.06.05:34: 31
> Total packets to port 27374 in alert.full-Jun.06.05:34: 0

Total packets to port 17300 in alert.full-Jun.07.05:45: 0
Total packets to port 27374 in alert.full-Jun.07.05:45: 0

Total packets to port 17300 in alert.full-Jun.08.06:40: 104
Total packets to port 27374 in alert.full-Jun.08.06:40: 0

Total packets to port 17300 in alert.full-Jun.09.06:51: 145
Total packets to port 27374 in alert.full-Jun.09.06:51: 0

Total packets to port 17300 in alert.full-Jun.10.07:00: 41
Total packets to port 27374 in alert.full-Jun.10.07:00: 4

Total packets to port 17300 in alert.full-Jun.11.05:43: 43
Total packets to port 27374 in alert.full-Jun.11.05:43: 0



- John
-- 
"Obviously, we do not want to leave zombies around."




More information about the list mailing list