Hehe sorry: 'legal implications', rather. So how can these scans be done without any sort of repercussions? Do they priginate from anyone who has a P2P program installed, without their knowledge? Or are they from specific servers? If so... couldn't that be stopped?
Thomas ----- Original Message ----- From: <[EMAIL PROTECTED]> To: "Thomas Madhavan" <[EMAIL PROTECTED]> Sent: Friday, April 19, 2002 6:37 AM Subject: Re: Zonealarm log - what is this? > Thomas, I don't think you have a P2P app open....it is just that P2P > apps by their nature go out trolling for other friendly faces, that's > how they're designed. I'm not sure what you mean by 'legal implements' > but generally speaking it isn't at all illegal to scan like this. > Unless I remember wrong, your computer showed that it rejected the > attempts to be friendly - that's what the 'S' flag means, it is the > first part of a three-way handshake between computers establishing a > connection between themselves. If your computer sent back a response > indicating that your computer was open on that particular port, you > would recieve a different 'flag' setting. > > Missy > > Thomas Madhavan wrote: > > > > Thanks a lot for all your replies : Admittedly I should have checked the > > ZoneAlarm readme and port listings, but why would a P2P port be open? I have > > no file sharing programs running (do they scan in the background?), or is it > > just other client servers scanning my computer for ports to connect to? If > > so are there any legal implements about scanning in this way? > > > > Thanks for the ZoneLog information, I'll check it out. > > > > Regards, > > Thomas Madhavan > > ----- Original Message ----- > > From: "Scott Bowlus" <[EMAIL PROTECTED]> > > To: "Thomas Madhavan" <[EMAIL PROTECTED]> > > Cc: <[EMAIL PROTECTED]> > > Sent: Monday, April 15, 2002 6:40 PM > > Subject: Re: Zonealarm log - what is this? > > > > > 6346 is the server port for gnutella. Those look like gnutella client > > > requests. The "S" you were asking about is the SYN TCP Header flag, which > > > indicates it is the intial client request for a tcp connection. > > > > > > Scott Bowlus
