Re: Strange outgoing packets ...

Port 1985 is used by Cisco routers for their HSRP High availability implementation.
The word "p0rnst4r" is the passphrase used to authenticate members of the Failover group to eachother.

Regards.

Barry

--
Barry Irwin         bvi@itouchlabs.com                    Tel:
+27214875178
Systems Administrator: Networks And Security
iTouch TAS      
http://www.itouchlabs.com         Mobile: +27824457210


----- Original Message -----
From: "Mobius" 
To: "Daniel Nyström" 
Cc: 
Sent: Thursday, January 30, 2003 2:41 AM
Subject: Re: Strange outgoing packets ...


Check the IP address that these packets have been going to.  See if its
some sort of porno site, or someone's personal machine.  You could well be
"0wned" but its too early to make that assumption.

If it IS going to a porno site, then check to see if you have any strange
software on your machine, anything that could be designed to find and
download porn.  It happens from time to time, especially if anyone else
uses your machine.  Also, have you checked for Virii/Trojans since you saw
that?

At 11:04 AM 1/29/2003, Daniel Nyström wrote:

>Hello!


it?

>

>Anyone experienced this before? Or am I totally 0wned :)