Re: port=1026&reason=ICMPsent
From: Donnie (queyosepa_at_quetejodas.net)
Date: 11/15/05
- Next message: Kadaitcha Man: "Re: Nominations (4) -> Re: Several ways you can delete a large avi file, and other files that might say they are in use."
- Previous message: smallfoot: "Re: Nominations (4) -> Re: Several ways you can delete a large avi file, and other files that might say they are in use."
- In reply to: ed: "port=1026&reason=ICMPsent"
- Next in thread: ed: "Re: port=1026&reason=ICMPsent"
- Reply: ed: "Re: port=1026&reason=ICMPsent"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 15 Nov 2005 00:59:11 GMT
"ed" <xyz@yahoo.com> wrote in message
news:q23ef.96767$Hs.9720@tornado.ohiordc.rr.com...
> My win 2002 SP2 server is periodically sending a ICMP on UDP port 1026 to
> various IPS. Looking at TCP
> view, the only process open on all IPS (about 9 of them) is LSASS.EXE,
> specifically isakmp. I have not actually witnessed the UDP, so this may
be
> a wrong assumption.
>
> Packet flag is 0x0, so this may be nothing more than a ping, not sure.
>
> Virus and anti-spyware scans are negative. Any thoughts?
>
###################################
Check the netstat -an output.
donnie
- Next message: Kadaitcha Man: "Re: Nominations (4) -> Re: Several ways you can delete a large avi file, and other files that might say they are in use."
- Previous message: smallfoot: "Re: Nominations (4) -> Re: Several ways you can delete a large avi file, and other files that might say they are in use."
- In reply to: ed: "port=1026&reason=ICMPsent"
- Next in thread: ed: "Re: port=1026&reason=ICMPsent"
- Reply: ed: "Re: port=1026&reason=ICMPsent"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|