echo and chargen

Mary M. Chaddock unisog-post at
Tue Jan 21 21:14:57 GMT 2003

The machines with the ports open are student's computers located in their 
dorms.  These are machines that did not have these ports open last month. 
There are quite a few of them. My firewall logs show there were several 
incoming connections _from_ port 7 on a computer. However, 
again, that is only one of many. There is a payload, and this does not 
appear to be a DoS.

I'm suspecting P2P is involved somehow.


Mary M. Chaddock, GSEC, GCUX
Network Security Administrator

More information about the unisog mailing list