echo and chargen
Mary M. Chaddock
unisog-post at waldo.acu.edu
Tue Jan 21 21:14:57 GMT 2003
The machines with the ports open are student's computers located in their
dorms. These are machines that did not have these ports open last month.
There are quite a few of them. My firewall logs show there were several
incoming connections _from_ port 7 on a udavis.edu computer. However,
again, that is only one of many. There is a payload, and this does not
appear to be a DoS.
I'm suspecting P2P is involved somehow.
Mary M. Chaddock, GSEC, GCUX
Network Security Administrator
More information about the unisog