North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: QAZ probes from webtv?

  • From: Dan Hollis
  • Date: Tue Oct 03 22:07:59 2000 
On Tue, 3 Oct 2000, John Fraizer wrote:
> So, Dan's ACL was trapping any TCP traffic destined to 7597 and not just
> TCP SYN?

Yes, although out of 50 million packets, the webtv servers/clients were
the only ones to *consistently* choose 7597 over the span of several days,
at different times of day and night.

I've got better ACLs now.

-Dan