----- Original Message -----
From: "Derek Doucette" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, June 19, 2001 11:38 PM
Subject: Who am I attacking???
> Hey there I was just checking through my logs and came across this:
>
> Jun 18 21:56:00 keene snort[18571]:
IDS296/http-whisker-splicing-attack-space: 192.168.0.158:3004 ->
151.193.165.62:80
>
> now am I confused or is this coming to from my comp to someones web
server? Does anyone have any ideas??
Not too many ideas here, but here is the standard port assignment for port
3004:
csoftragent 3004/tcp Csoft Agent
csoftragent 3004/udp Csoft Agent
obtained from this link:
http://www.iana.org/assignments/port-numbers
Hopefully that will give you a clue as to what program(s) are involved.
Rich Cloutier
SYSTEM SUPPORT SERVICES
www.sysupport.com
**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************
