[OT] UDP to port 1828 like crazy

[shrek-m at gmx.de]

Michael St. Laurent wrote:

>I'm seeing tons of network activity all UDP traffic to port 1828.  Is this
>an indication of a virus?
>
>

# lsof -Pi :1828

# grep 1828 /etc/services /usr/share/nmap/nmap-services


http://www.iana.org/assignments/port-numbers

itm-mcell-u     1828/tcp    itm-mcell-u
itm-mcell-u     1828/udp    itm-mcell-u


google ??
trojan virus backdoor dos port udp 1828


http://berkeley.intel-research.net/bnc/snortsensor/rules.html
1828 WEB-MISC iPlanet Search directory traversal attempt



--
shrek-m