NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] FW Log question?



Service is the same as destination port. E.g. if one connects to a web
server listening on port 80, one's destination port is 80. Your sample log
entry indicates that someone is looking for machines listening on the trojan
port.

The source port is generally a random high port chosen by the OS.

-----Original Message-----
From: Velis, Alain [mailto:[email protected]]
Sent: Sunday, March 31, 2002 9:42 AM
To: [email protected]
Subject: [FW-1] FW Log question?


Hi all,
        When looking at the logs -- What is the difference between the
numeric Service Field and the Source Port?
        Which field should I be weary of? i.e. --  I have a log and the
service field has a number that corresponds to a well known trojan, but the
s. port does not ---- should I be more interested in the service?


Thanks,
Alain Velis

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.