Re: port=1026&reason=ICMPsent

From: Donnie (queyosepa_at_quetejodas.net)
Date: 11/15/05


Date: Tue, 15 Nov 2005 00:59:11 GMT


"ed" <xyz@yahoo.com> wrote in message
news:q23ef.96767$Hs.9720@tornado.ohiordc.rr.com...
> My win 2002 SP2 server is periodically sending a ICMP on UDP port 1026 to
> various IPS. Looking at TCP
> view, the only process open on all IPS (about 9 of them) is LSASS.EXE,
> specifically isakmp. I have not actually witnessed the UDP, so this may
be
> a wrong assumption.
>
> Packet flag is 0x0, so this may be nothing more than a ping, not sure.
>
> Virus and anti-spyware scans are negative. Any thoughts?
>
###################################
Check the netstat -an output.
donnie



Relevant Pages

  • Re: port=1026&reason=ICMPsent
    ... "Donnie" wrote in message ... Looking at TCP ... >> specifically isakmp. ... I have not actually witnessed the UDP, ...
    (alt.computer.security)
  • NFS problem with recent 2.6 kernels (also serial console weirdness)
    ... 100000 2 tcp 111 portmapper ... 100000 2 udp 111 portmapper ... mounted filesystem with ordered data mode. ... Mounted root (ext3 filesystem) readonly. ...
    (Linux-Kernel)
  • Solaris 9 <---> linux (2.6.8) NFS file locking problem?
    ... to the same file placed on nfs filesystem. ... 100000 4 tcp 111 portmapper ... 100000 4 udp 111 portmapper ... 100021 1 udp 4045 nlockmgr ...
    (SunManagers)
  • Urgent help with Secure NFS.
    ... have that option - I'm just attempting to tunnel all NFS traffic to the ... 100000 4 tcp 111 rpcbind ... 100000 4 udp 111 rpcbind ... 100021 1 tcp 49153 nlockmgr ...
    (SSH)
  • Re: nfs error
    ... kernel: nfs: server ... So if your system uses ypbind be sure that is working properly before ... 100000 2 tcp 111 portmapper ... 100000 2 udp 111 portmapper ...
    (comp.sys.sun.admin)

Quantcast