D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] UDP Port 37 traffic 2010-02-08

 

On Tue, 9 Feb 2010, Julian Hall wrote:

Gordon Henderson wrote:
On Tue, 9 Feb 2010, Simon Waters wrote:

Gordon Henderson wrote:

Port 37 - Thats "timeserver"... used to send the time & date to a remote site - I think it's generally been disabled for years now... Odd that people are poking data to it!!!

We are seeing it logged because of UDP checksum errors. I'm thinking it could be corrupted DNS traffic, or DDoS/malware related, or port scanning with spoofed packets either way it makes me just a little nervous.

Seems to have stopped around 13:24:22 for the moment.

Still nothing going via my main access routers... There's 14 servers and a few other random boxes behind them, so it's usually quite busy...


Just out of interest this mail got dumped in my Junk folder. I don't know why as I've had no problems with mail from DCGLUG or from you Gordon. Curious whether there is anything different about this specific mail?

I'd hope nothing was untowards with my email - I use the most bog-standard of bog-standardness of email clients (pine) and as far as I'm aware, nothing's changed at my end (and as I'd be the one to change it, I can say that there have been no changes :)

I don't suppose it says why it was junked?

Gordon

--
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html