The 4 Jan <a href="http://www.security.org.sg/gtec/honeynet/viewdiary.php?
diary=20050104">entry for the Honeynet Project Handler's Diary is
pretty interesting. It talks about unusual TCP/4899 (radmin) traffic
and UDP/1026 and 1027 (Windows messenger) traffic. (Not to be confused
with Instant Messenger traffic.)
No comments:
Post a Comment