RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second

From: alfaentomega <alfaentomega(at)yahoo.com>
Date: Fri Dec 27 2002 - 03:44:19 EST

• Charles.Fasching@milestonesystems.com wrote:
  > What OS are you scanning?
  > Is it running RPC services or DCE services
  > (Microsoft's RPC - such as an exchange server)?
  > That can lead to the
  > type of behavior that you are seeing.
  

No, it's a Debian GNU/Linux box with identd being the only service available (actually, it's nullidentd).

But I already know what is the problem.
See Fyodor's answer: <20021224191816.GA10153@core.lnxnet.net>

Thanks.
-Alfaentomega.

---

Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Fri Dec 27 12:08:48 2002