[ale] Unusual scans

[Dow Hurst]

There has been a lot of vulnerabilities reported on different packages 
for IRIX but I haven't been notified of any worms specifically for IRIX. 

What is tcpmux used for?  I should have thought about the fact that ping 
is ICMP and not TCP.  Some of the lowest number ports aren't used 
anymore, correct?  Just there because of legacy?
Dow


Jason Day wrote:

>On Thu, Aug 21, 2003 at 05:55:07PM -0400, Dow Hurst wrote:
>  
>
>>ping
>>    
>>
>
>No, ping uses ICMP.  These are scans to TCP port 1, which, as Brian
>points out, is the tcpmux port.  I did some googling, and it looks like
>there was a worm way back in 1998 that affected IRIX, but I haven't seen
>anything recent that uses this port.  Is there a new worm on the
>horizon?  For IRIX???
>  
>

-- 
__________________________________________________________
Dow Hurst                  Office: 770-499-3428           
Systems Support Specialist    Fax: 770-423-6744           
1000 Chastain Rd. Bldg. 12                                
Chemistry Department SC428  Email:   dhurst at kennesaw.edu  
Kennesaw State University         Dow.Hurst at mindspring.com
Kennesaw, GA 30144                                        
*****************************************************************
This message (including any attachments) contains confidential  *
information intended for a specific individual and purpose,     *
and is protected by law.  If you are not the intended recipient,*
you should delete this message and are hereby notified that     *
any disclosure, copying, or distribution of this message, or    *
the taking of any action based on it, is strictly prohibited.   *
*****************************************************************


_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale