Re: [suse-security] Strange traffic.

[Marc Samendinger <marc.samendinger@xxxxxxxxxxxx>]

On Fri, May 20, 2005 at 09:51:59AM -0500, Wade Grant wrote:
> I have reports of traffic hitting through a few iptable boxen
> that seems kind of interesting.
> Has anyone seen or heard of traffic on udp 1148?
> I am thinking it may just be some spy or mal ware.
> Any info you know of would be appreciated.

According to isc theres not much going on on port 1148.
http://isc.sans.org/port_details.php?port=1148
furthermore most logged 1148 traffic is tcp. 

I can't find any suspicious Traffic for this port in our logfiles.

> wade G.

marc

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here