[unisog] anyone else seeing lots of popup spam/malware?

Dale W. Carder dwcarder at doit.wisc.edu
Thu Oct 27 16:01:01 GMT 2005


Thus spake Peter Van Epp (vanepp at sfu.ca) on Thu, Oct 27, 2005 at 08:31:25AM -0700:
> 	Turns out I was as usual incorrect. There are both a DNS request and
> some skype traffic using udp source port of 0 in the argus logs overnight (as
> I mentioned earlier, being able or willing to read RFCs is optional for certain
> tcp stack writers). 

"Source Port is an optional field, when meaningful, it indicates the port
of the sending  process,  and may be assumed  to be the port  to which a
reply should  be addressed  in the absence of any other information.  If
not used, a value of zero is inserted." -- RFC 768

Dale

----------------------------------
Dale W. Carder - Network Engineer   
University of Wisconsin at Madison  
http://net.doit.wisc.edu/~dwcarder



More information about the unisog mailing list