Re: [Dshield] Port 554/tcp

["Bart E. Hawley Sr." <[EMAIL PROTECTED]>]

That is the port for RealAudio streams by default. Though there could be
some exploit for it I suppose. But I have heard of none so far today. Is
someone watching a Realstream?


----- Original Message ----- 
From: "Jon R. Kibler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, October 01, 2003 9:04 AM
Subject: [Dshield] Port 554/tcp


> Today is Monday, right? At least is seems so here. The data circuit over
which route outgoing traffic (except mail) is down, and since I cannot
access the web, I may be asking some stupid questions here, so please
forgive me in advance.
>
> We have seen a sudden rise this morning in 554/tcp traffic. Has anyone
else?
>
> One of our Linux boxes claims in the default /etc/services file that 554
is "Real Time Stream Control Protocol"... what is that?
>
> Any ideas with what application or exploit these probes may be associated?
>
> Thanks!
>
> Jon R. Kibler
> Chief Technical Officer
> A.S.E.T., Inc.
> Charleston, SC  USA
> (843) 849-8214
>
>
>
>
> ==================================================
> Filtered by: TRUSTEM.COM's Email Filtering Service
> http://www.trustem.com/
> No Spam. No Viruses. Just Good Clean Email.
>
>


----------------------------------------------------------------------------
----


> _______________________________________________
> list mailing list
> [EMAIL PROTECTED]
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
>

_______________________________________________
list mailing list
[EMAIL PROTECTED]
To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list