TrendMicro also uses 12345 for its automatic updates.
-----Original Message-----
From: Carric Dooley [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, May 23, 2000 11:57 AM
To: Low Lay Hua; [EMAIL PROTECTED]
Subject: Re: [FW1] udp 2301
12345 is the default port for Netbus...
I have no idea what someone would be doing on 2301 udp unless they are
trying to comoufage a trojan by running it on that port. Do you have a
sniffer??
Carric Dooley
Network Security Consultant
"I have often regretted my speech, never my silence."
- Xenocrates (396-314 B.C.)
----- Original Message -----
From: "Low Lay Hua" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 22, 2000 9:01 PM
Subject: [FW1] udp 2301
>
> Hi,
>
> One of my firewall logs, have entry for udp 2301 every 2 mins from a
> particular IP address.
>
> Someone told me that 2301/udp is cpq-wbem (Compaq HTTP).
>
> Appreciate if anyone could let me know what is 2301/udp doing?
>
> I also saw 12345/tcp service on my logs. What is that?
>
> I understand all this service is user defined service. But I would like
> to know how dangerous is it.
>
> Pls advise.
>
> Many thanks.
>
> --------------------------------------------------------------------------
-
> Low Lay Hua Tel: 65 4719828
> Network Operation Centre Fax: 65 4753273
> Singapore Telecom [EMAIL PROTECTED]
>
> PGP Public Key: http://corporate.singnet.com.sg/layhua/PGP
> Key fingerprint = 90 58 94 77 BE FC 28 D1 5B 48 18 B1 69 73 06 D1
> --------------------------------------------------------------------------
--
>
>
>
>
============================================================================
====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
