Article View: comp.security.firewalls
Article #222Re: Cuervo, I disagree: ShareSniffer Released
From: John Navas
Date: Sat, 24 Feb 2001 20:17
Date: Sat, 24 Feb 2001 20:17
32 lines
2902 bytes
2902 bytes
[POSTED TO comp.dcom.modems.cable; PLEASE REPLY THERE]
In <0stf9t41o30r3u3k7bcgvvtnja55bbvku6@4ax.com>, rtoledo@gte.net wrote:
>>Third, "port scanning" (as defined above) doesn't cover the case of probing
>>for a single trojan port (e.g., 27374). That, however, is fairly clearly
>>an indication of someone trying to break in.
>
>ALL it indicates is that they canned the port. if it goes further
>inward--> then it's a attempt!
A port "scan" is an actual attempt to establish a connection to the port
-- that's how it works.
>every time you type a www into a web
>browser you are scanning port 80 on that ip# and sometimes on several
>IP#s depending on if it's distributed among several servers. would you
>like to be arrested?
Not a valid analogy -- the web site is a server open to the public. The
issue here is authorization.
>the whole internet is a OPEN OPEN OPEN system. if you are on it
>CAVEAT EMPTOR! pull the wire! and get off the INTER.net
Not true. The Internet is just a network. Things connected to the
network may be open and they may be closed.
--
Best regards,
John Navas <http://navasgrp.home.att.net/>
CABLE MODEM/DSL GUIDE: <http://Cable-DSL.home.att.net/>
Technical Details
Message-ID:
<fFUl6.3991$S25.57553@typhoon.sonic.net>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!news-out.usenetserver.com!news-out.usenetserver.com!feed2.onemain.com!feed1.onemain.com!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.skycache.com!Cidera!typhoon.sonic.net!not-for-mailReferences:
<3A966412.9336DCD8@mynetwatchman.com> <jtvl6.1306$aA5.364833@typhoon2.ba-dsg.net> <97656j$d8f$2@news.panix.com> <WqBl6.3899$S25.55097@typhoon.sonic.net> <976pnb$jon$2@news.panix.com> <FeCl6.3919$S25.55117@typhoon.sonic.net> <yd3dd4tlxa.fsf@UBEblock.psr.com> <0stf9t41o30r3u3k7bcgvvtnja55bbvku6@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,b3c453f70036b961 X-Google-Attributes: gidf922c,public X-Google-Thread: 10090f,b3c453f70036b961 X-Google-Attributes: gid10090f,public X-Google-Thread: 113850,b3c453f70036b961 X-Google-Attributes: gid113850,public X-Google-Thread: f5dc1,b3c453f70036b961 X-Google-Attributes: gidf5dc1,public X-Google-ArrivalTime: 2001-02-24 12:22:07 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!news-out.usenetserver.com!news-out.usenetserver.com!feed2.onemain.com!feed1.onemain.com!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.skycache.com!Cidera!typhoon.sonic.net!not-for-mail From: John Navas <spamfilter@navasgrp.dublin.ca.us> Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable Subject: Re: Cuervo, I disagree: ShareSniffer Released Organization: The Navas Group, Dublin, CA, USA References: <3A966412.9336DCD8@mynetwatchman.com> <jtvl6.1306$aA5.364833@typhoon2.ba-dsg.net> <97656j$d8f$2@news.panix.com> <WqBl6.3899$S25.55097@typhoon.sonic.net> <976pnb$jon$2@news.panix.com> <FeCl6.3919$S25.55117@typhoon.sonic.net> <yd3dd4tlxa.fsf@UBEblock.psr.com> <0stf9t41o30r3u3k7bcgvvtnja55bbvku6@4ax.com> X-Newsreader: Forte Agent 1.8/32.548 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 32 Message-ID: <fFUl6.3991$S25.57553@typhoon.sonic.net> Date: Sat, 24 Feb 2001 20:17:15 GMT NNTP-Posting-Host: 209.204.185.87 X-Complaints-To: abuse@sonic.net X-Trace: typhoon.sonic.net 983045835 209.204.185.87 (Sat, 24 Feb 2001 12:17:15 PST) NNTP-Posting-Date: Sat, 24 Feb 2001 12:17:15 PST