Re: Slammer variant?
From: Greg Dunlap (greg_at_buzzbait.com)
Date: 08/25/04
- Previous message: Jose Troncoso: "Re: XP_sendmail Digitally Signed"
- In reply to: Kevin McDonnell [MSFT]: "Re: Slammer variant?"
- Next in thread: Kevin McDonnell [MSFT]: "Re: Slammer variant?"
- Reply: Kevin McDonnell [MSFT]: "Re: Slammer variant?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 25 Aug 2004 08:22:17 -0700
> Does this server have Linked Servers or Remote Servers?
> Is this server using SQL Replication?
> This may explain outgoing connections, but not on UDP. They would be TCP
> sessions to other machines.
Nope, no replication or linked servers happening at all. There's a LOT
of TCP connections going out too, like in the neighborhood of 80 at a
time to each destination address, all probing ports above 30000, which
is a weird place to be probing. That netstat above was just a small
sample.
Greg Dunlap
- Previous message: Jose Troncoso: "Re: XP_sendmail Digitally Signed"
- In reply to: Kevin McDonnell [MSFT]: "Re: Slammer variant?"
- Next in thread: Kevin McDonnell [MSFT]: "Re: Slammer variant?"
- Reply: Kevin McDonnell [MSFT]: "Re: Slammer variant?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|