Hello Elisabeth,
  This is all I could find on port 32778.

Port 32778 / tcp
Keyword sometimes-rpc19
Description Sometimes an RPC port on my Solaris box (rstatd)

Port 32778 / udp
Keyword sometimes-rpc20
Description Sometimes an RPC port on my Solaris box (rstatd)

  Haven't seen such activity on my boxes.

Robert Woods



-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED]]On Behalf Of
Elisabeth Wonders
Sent: Monday, October 22, 2001 10:36 AM
To: [EMAIL PROTECTED]
Subject: [FW-1] multiple connections using service 32778


During a 15 minute span this morning, my active log showed 40-50
connections from about 10 different source IPs (some of which I could
resolve, some not) to my firewall, all using service 32778.  One of the
IP's had 20 concurrent connections.

Two questions:

What is that service used for?  It was listed as unassigned at IANA's site
http://www.iana.org/assignments/port-numbers

Why did my "Any -- firewall -- Any -- Drop" rule not catch this?

I've added a rule just to block this mystery traffic until I get a handle
on what it is.

TIA for any help/opinions you may have to offer.

Elisabeth

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================

Reply via email to