[lug] outgoing port 220 exploit?

D. Stimits stimits at comcast.net
Tue Jan 20 12:26:38 MST 2004


David Anselmi wrote:

> Every 5 seconds:
>
> lsof -i4tcp:220
>
> Dave


I've tried lsof and netstat with -c, none show it. A failed connect 
takes all of about 50 milliseconds, so I'd have to hit it in that time. 
Anything taking a "snapshot", and not reading 100% of anything using the 
port 6129, or attempting outgoing 220, will fail. Due to firewall rules, 
even tcpdump will not work, as blocked packets do not get recorded.

D. Stimits, stimits AT comcast DOT net




More information about the LUG mailing list