Re: Source port 8 to destination port 0?

From: Thor Kottelin (thor_at_anta.net)
Date: 05/03/05

  • Next message: Alex: "default user profile" 
    Date: Tue, 03 May 2005 11:54:58 +0300

    Chris wrote:
    >
    > I have a new Exchange 2003 server with Groupshield 6.0 and VirusScan
    > 8.0i running on it (up to date, of course) and one of my Cisco 4215 IDS
    > boxes is picking up traffic from it (port 8) to each of my AD Domain
    > Controllers (port 0!) and logging scores of intrustion alerts.

    I assume you mean ICMP types 8 (echo) and 0 (echo reply).

    Thor 

    -- 
http://www.anta.net/OH2GDF
  • Next message: Alex: "default user profile"