Robert Olsson wrote:
>
> My analyser has already been out... :-) I saw a lot of packets to/from
> UDP port 28800 but have no clue as to what it is used for.
If you have access to the machine, install some software that will
tell you what executable is doing the talking.
For Windows machines, Zonealarm will do it a little bit. Better
solutions that will give you details include:
TCPViewPro (not free)
http://www.winternals.com/products/monitoringtools/tcpviewpro.shtml
FPort (free)
http://www.foundstone.com/rdlabs/tools.php
--
Gary Flynn
Security Engineer - Technical Services
James Madison University
Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/info-security/engineering/runsafe.shtml
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
