Security

Ask something
Discussion Locked

NGS Sniff

0 helpful
4 replies

by dnvrtechgrrl

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

NGS Sniff is showing that an outside IP (255.255.255.255) is pinging UDP 47474.

Anyone know of any legitimate reason to be knocking on a door that far up the number chain?

4 replies

by jmgarvin

I would bet it is a routing issue if you are using Cisco stuff. I would assume some routing table configuration error.

255.255.255.255 is a Class C that can't come from the outside...check your router.

by dnvrtechgrrl

I'm wondering more if it isn't my reporting utilty though. I have a few showing up that should be the inside IP's contacting the outside but it's reversed in the reporting screen.

I'll give Snort a shot and see if it's not corrected there.

Thanks!

by djameson

My Netscreen got DOSed about 2 weeks ago, I was a couple versions behind due to some client issues. My packet sniffer showed a simular pattern, the source address was spoofed.

by brian.peck

Are you running any software from www.esker.com? I found this same port and it was tied to eslcbcst.exe running in task manager. We are running smarterm from these folks. Trying to find support number to call them and ask why,

This discussion is closed to new replies.