Re: Ports used in making 'network places' connection
From: Keith W. McCammon (km@km.com)
Date: 11/27/02
- Next message: John C: "Server Admin rights"
- Previous message: Steven V.: "Re: ntrights.exe"
- In reply to: Scott Coutts: "Ports used in making 'network places' connection"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Keith W. McCammon" <km@km.com> Date: Wed, 27 Nov 2002 10:49:48 -0500
> I'm getting 'intrusion attepts' on my PC when I try to make a new
> connection to an FTP server in the 'network places' folder of xp/2000.
> Is this normal? I'm being notified of incoming connections to the
> 'Sockets de Trois' trojan on port 5000/5001.
It's likely either the ephemeral port being used to establish the control
channel, or the port selected for the passive data channel. Pretty
standard, but would set off a generic firewall/IDS.
- Next message: John C: "Server Admin rights"
- Previous message: Steven V.: "Re: ntrights.exe"
- In reply to: Scott Coutts: "Ports used in making 'network places' connection"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|