Re: ports 135, 445, 139 and 1433

From: David Jones (JONESD_at_er6.eng.ohio-state.edu)
Date: 03/31/05 

Date: 30 Mar 2005 22:51:17 GMT

In message <424b0c8c$0$3712$39cecf19@news.twtelecom.net>,
   Dan Holm <danholm@googlesfreemailservice.com> writes:
>> First question: This is a LINKSYS router, and on the Log page there is a
>> possibility to send the logs to a particular address. Any idea what
>> this does?
>
>It depends upon the version of the router. Some of them use this weird
>proprietary Linksys protocol for log collection, but some of the newer
>ones (which are based on Linux) use plain old syslog.

For the old BEFSR41 cable router, the messages look an awful lot like SNMP
messages. I was able to decode them at one time.

David L. Jones | Phone: (614) 271-6718
Ohio State University | Internet:
140 W. 19th St. | jonesd@er6s1.eng.ohio-state.edu
Columbus, OH 43210 | vman+@osu.edu

Disclaimer: I'm looking for marbles all day long.

Relevant Pages

  • Re: Help -- Have I been rooted?
    ... I only allowed ssh, httpd, and ftp port forwarding to my ... machine for the past few days while I used a store bought router. ... I checked the router logs and was greeted by pages of stuff like this: ...
    (comp.os.linux.security)
  • Re: Unable to establish the VPN connection. The VPN server may be
    ... Router 192.168.3.1 DHCP server ... >> or security parameters may not be configured properly for this connection. ... What about the ISA logs? ... If you can get a VPN connection but authentication times ...
    (microsoft.public.windows.server.sbs)
  • Re: Linux vs LinkSys 4 port Cable router
    ... computers are "querying" or attempting to connect to your network. ... Which ones a specific Linksys router blocks doesn't seem to be ... On the other hand many of the current worms and hacker tools do scans ... computer logs. ...
    (comp.security.firewalls)
  • Re: Linux vs LinkSys 4 port Cable router
    ... computers are "querying" or attempting to connect to your network. ... Which ones a specific Linksys router blocks doesn't seem to be ... On the other hand many of the current worms and hacker tools do scans ... computer logs. ...
    (comp.security.firewalls)
  • Re: Small & cheap hardware firewall?
    ... Router was blocked and discarded by the Linksys Router, ... DMZ appears in the logs as Inbounds, ... WallWatcher reports everything the Router places in the log records ...
    (comp.security.firewalls)