Re: [Full-Disclosure] Scan for IRC

[Oliver Leitner <Shadow333@xxxxxx>]

from what i know normally irc runs on tcp 6667

assides of that irc can be on any port, so id try to rather block the central 
big servers instead of going for the port, and dont forget to block all known 
or unknown web pages that feature webirc portals...

well, that are my few thoughts.

greetings
Oliver Leiter
Technical Staff
http://www.shells.at

On Saturday 22 January 2005 00:34, RandallM wrote:
> I am so sorry for interrupting the list. I'm trying to pick up IRC
> communications on the network. I've made some filters for Ethereal and
> Observer but can't seem to pick it up. I'm doing something wrong. Used the
> 6668-6669 ports. Any help?
>
> thank you
> Randall M
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

-- 
By reading this mail you agree to the following:

using or giving out the email address and any 
other info of the author of this email is strictly forbidden.
By acting against this agreement the author of this mail 
will take possible legal actions against the abuse.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html