Re: [Dshield] PORT 22321

[Simon Waters <[EMAIL PROTECTED]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Deb Hale wrote:
> Page 44 of this article talks about this port being used by a Korean Music
> Service.  Maybe someone was looking for KaZaa like sites and happened
across
> this.
>
> http://www.giac.org/practical/GCIA/Michael_Wisener_GCIA.pdf

Thanks, interesting paper.

But doesn't seem to explain the nature of the peaks in the dshield graph
for this port. Although the server is in Korea I can't see why music
server software would hit Dshield ports in such a regular fashion unless
it is a deliberate feature of the software.

What time series analysis is done on the DSHIELD data? Obviously some
sort of trend analysis to note ups and downs per port, but has anyone
done any more detailed analysis to look for other features? Can I get
timeseries of port 22321 going further back in time? Raw data?

-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/eo+nGFXfHI9FVgYRAviHAJ4+EA38VWfBwNzhZi0mGla7+5u+0gCgjbhG
XiVBuu083a8Q1quc6dN/WCY=
=SQSn
-----END PGP SIGNATURE-----

_______________________________________________
list mailing list
[EMAIL PROTECTED]
To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list