echo and chargen

Mary M. Chaddock unisog-post at waldo.acu.edu
Tue Jan 21 21:14:57 GMT 2003


The machines with the ports open are student's computers located in their 
dorms.  These are machines that did not have these ports open last month. 
There are quite a few of them. My firewall logs show there were several 
incoming connections _from_ port 7 on a udavis.edu computer. However, 
again, that is only one of many. There is a payload, and this does not 
appear to be a DoS.

I'm suspecting P2P is involved somehow.

Thanks,
-Mary.

Mary M. Chaddock, GSEC, GCUX
Network Security Administrator



More information about the unisog mailing list