RE: Port 3335

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Eliftps default port is 3335
http://software.sci.utah.edu/eliftp.html

Can you give us any more information? Is the traffic being sent to your hosts with a destination port or source port of 3335, is it TCP or UDP? Any chance of getting some packet dumps of this activity?

Cheers
Danny
Network Security Engineer
Drexel University
PGP Print: C6AD B205 E3C6 38AB 0164 6604 66F5 CCFC F4ED F1E0 PGP Key: http://akasha.irt.drexel.edu/danny.asc  

|->-----Original Message-----
|->From: Robin Lynn Frank [mailto:rlfrank@paradigm-omega.com]
|->Sent: Friday, March 07, 2003 8:54 PM
|->To: incidents@securityfocus.com
|->Subject: Port 3335
|->
|->I am seeing a lot of activity on port 3335 from a number of domains. Can

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBPmzPLGb1zPz07fHgEQJrEACgoZNGh2fRYcK40t2TbqaBpYWN6KAAniY5 MR7KAj7Wni2l4Lhdalfvhx21
=EV6j
-----END PGP SIGNATURE-----

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

<Pre>Lose another weekend managing your IDS? Take back your personal time.
15-day free trial of StillSecure Border Guard.</Pre> <A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A> Received on Mon Mar 10 13:15:59 2003