[lug] how many ways to relay port 220?

[Bear Giles]

D. Stimits wrote:
> I've even seen a hit now on a 2nd machine with a different version of 
> KRUD on it, whereby the machine local tcp port 6129 is trying to send 
> outbound to random (or seemingly so) port 220 tcp ports. I don't think 
> the machines are compromised (never know for sure till I figure exactly 
> what is going on).

The thing that catches my eye is the seemingly fixed local port. 
With standard sockets programming you can only specify one port. 
Are you sure that there's no process sitting on port 6129?