[Wolves] High port numbers

[Jono Bacon]

Hi all,

I seem to remember someone saying something about high
port numbers being bad. Well, lo and behold I have
some snort alerts that seem to have high port numbers.
These numbers range from around 34000 to 39000. The
report is:

  spp_stream4: TCP CHECKSUM CHANGED ON RETRANSMISSION 
    (possible fragroute) detection

Any clues?

      Jono



=====
Jono Bacon - [vmlinuz] - jonoATkdeDOTorg
KDE Developer - Diary: http://www.advogato.org/person/jono/

__________________________________________________
Do You Yahoo!?
Yahoo! Finance - Get real-time stock quotes
http://finance.yahoo.com