Wilders Security Forums  

Go Back   Wilders Security Forums > Security Products > other firewalls
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old April 19th, 2005, 11:25 AM
lynchknot's Avatar
lynchknot lynchknot is offline
Frequent Poster
 
Join Date: Jun 2004
Location: SW WA
Posts: 904
Default Network activity for "na"

I have some strange network activity and port scans happening. There are no rules for "na" and Outpost won't allow any rule to be made for it. It is using Emule rules to connect. Emule is not even running! Will someone take a look at this and advise please? Thank you.

General Electric on port 60? -

Quote:
OrgName: General Electric Company 3.1.0.17
OrgID: GENERA-9
Address: 1 Independence Way
City: Princeton
StateProv: NJ
PostalCode: 08540
Country: US
Attached Thumbnails
Click image for larger version

Name:	lynchknot-combo-p435517.gif
Views:	4
Size:	98.2 KB
ID:	163190  

__________________
Firefox Themes20050620 Firefox/1.0.5

Last edited by lynchknot : April 19th, 2005 at 11:36 AM.
  #2  
Old April 20th, 2005, 02:52 AM
lynchknot's Avatar
lynchknot lynchknot is offline
Frequent Poster
 
Join Date: Jun 2004
Location: SW WA
Posts: 904
Default Re: Network activity for "na"

Ok well, nevermind.*edit - Oh wait, I'm to wait 24 hours sorryl
__________________
Firefox Themes20050620 Firefox/1.0.5
  #3  
Old April 20th, 2005, 03:27 AM
CrazyM's Avatar
CrazyM CrazyM is offline
Firewall Moderator
 
Join Date: Feb 2002
Location: BC, Canada
Posts: 2,433
Default Re: Network activity for "na"

Does the help file explain what n/a signifies under process name? Are they actually active connections or perhaps expiring connections no longer associated to the application?

The inbound probes to 4662 (emule port) are not uncommon, particularly if you have been running the program and then shut it down. The probes could also be someone looking for vulnerable systems/configurations of the app.

In regards to the port 60, do you log the emule traffic? If so, check for any previous connections/entries from that IP.

On a side note are you behind a router? UPnP enabled? Are you using it?

Regards,

CrazyM
__________________
"The best thing we can do in cyberspace is exactly what we do in the real world: do our best to manage the risks."
- Bruce Schneier

Last edited by CrazyM : April 20th, 2005 at 03:36 AM.
  #4  
Old April 20th, 2005, 01:39 PM
lynchknot's Avatar
lynchknot lynchknot is offline
Frequent Poster
 
Join Date: Jun 2004
Location: SW WA
Posts: 904
Default Re: Network activity for "na"

In regards to "N/A" there was data being transferred in/out under Emule's rules - the strange thing is, Emule was not running when this occured.


I suppose the new "N/A" description in Outpost is:
Quote:
Network Activity—all objects having a network activity (connections, scanning etc).
__________________
Firefox Themes20050620 Firefox/1.0.5

Last edited by lynchknot : April 20th, 2005 at 05:00 PM.
  #5  
Old April 20th, 2005, 07:55 PM
fredra's Avatar
fredra fredra is offline
Frequent Poster
 
Join Date: Jul 2004
Posts: 365
Default Re: Network activity for "na"

More information here
Cheers
__________________
"The weak can never forgive. Forgiveness is the attribute of the strong."
Gandhi
 

Wilders Security Forums > Security Products > other firewalls « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 11:22 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums