These 2301/udp packets is compaq servers with insight manager agents trying
to discover other compaq devices. You can turn this off by pointing your web
browser to http://yourserver:2301/cpqopts.htm

12345/tcp is usually a port used by NetBus, a trojan (back door into your
system).

Lars

-----Original Message-----
From: Low Lay Hua [mailto:[EMAIL PROTECTED]]
Sent: 23. mai 2000 03:01
To: [EMAIL PROTECTED]
Subject: [FW1] udp 2301



Hi,

One of my firewall logs, have entry for udp 2301 every 2 mins from a
particular IP address.

Someone told me that 2301/udp is cpq-wbem (Compaq HTTP).

Appreciate if anyone could let me know what is 2301/udp doing?

I also saw 12345/tcp service on my logs. What is that?

I understand all this service is user defined service. But I would like
to know how dangerous is it.

Pls advise.

Many thanks.

---------------------------------------------------------------------------
Low Lay Hua                             Tel: 65 4719828
Network Operation Centre                Fax: 65 4753273
Singapore Telecom                       [EMAIL PROTECTED]

PGP Public Key:         http://corporate.singnet.com.sg/layhua/PGP
Key fingerprint =  90 58 94 77 BE FC 28 D1  5B 48 18 B1 69 73 06 D1
----------------------------------------------------------------------------



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to