[Dshield] what kind of attack is this?

Guy Barnum GuyBarnum at Armscole.com
Sat Feb 14 05:20:54 GMT 2004

-----Original Message-----
From: Micheal Patterson [mailto:micheal at tsgincorporated.com]
Sent: Friday, February 13, 2004 9:21 AM
To: General DShield Discussion List
Subject: Re: [Dshield] what kind of attack is this?

The dest port is associated with Norton Corp Edition and the port that NavCE
Clients talk to a parent server.

Right, thats one use this port is put to and thats all I could find in my online searching.

So do you think this affected server sent 12,000,000 packets yesterday to entire blocks of IP ranges because norton anti-virus was working properly and this is normal behaviour?  Come on.


More information about the list mailing list