[Wylug-help] Strange UDP port activity

James Holden wylug at jamesholden.net
Wed Feb 2 17:46:41 GMT 2005


fluffy at fluffybacon.co.uk wrote:

> [...]


>The reason I'm slightly worried by this is that according to my routers
>logs this machine has been randomly(?) pinging hosts on the Internet.
>SIUD is unset on /bin/ping and the machine has only one user (me).
>
>Needless to say I have no idea whats going on, and have unplugged the
>machine from the network.  Any further insights you might be able to
>provide would be greatly appreciated.  This is very much a learning
>experience for me, but mostly I hate mysteries.
>
>
>
There's no need to worry! I'm quite sure it's nmap opening the port.
Have you checked with netstat multiple times during nmap's scan? Maybe
the port changes each time it scans a new remote port.

Also... my machine behaves the same!

James

>Ciaran.
>
>
>
>
>_______________________________________________
>Wylug-help mailing list
>Wylug-help at wylug.org.uk
>http://list.wylug.org.uk/mailman/listinfo/wylug-help
>
>




More information about the Wylug-help mailing list