[unisog] Windows Messaging Spam

Gary Flynn flynngn at jmu.edu
Fri Oct 11 21:46:24 GMT 2002


The Messenger service is one of the RPC services run
in a svchost.exe process. When I send a message locally,
that process opens a random high UDP port. I don't see
any ports open when I start the Messenger service.

I'd guess the high port opens when someone requests the
services of the Messenger through the MS-RPC port 135.

-- 
Gary Flynn
Security Engineer - Technical Services
James Madison University

Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/runsafe



More information about the unisog mailing list