Port UDP 3049

From: Ryan Russell (ryan@securityfocus.com)
Date: 03/10/02 

Date: Sat, 9 Mar 2002 16:40:37 -0700 (MST)
From: Ryan Russell <ryan@securityfocus.com>
To: incidents@securityfocus.com

I'm looking at some backdoor code that listens on UDP 3049. I can see
through ARIS TMS that a number of users have recoded scans for that port.
I'm wondering if anyone has capture one of the packets, and if they could
send me a copy?

                                Ryan

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com