[plug] Attempted Intrusions

James Devenish devenish at guild.uwa.edu.au
Tue Oct 26 20:29:53 WST 2004


In message <417E3E60.30308 at tigris.org>
on Tue, Oct 26, 2004 at 08:09:04PM +0800, Tim White wrote:
> > > 492716
> >The highest port supported by TCP/IP is port 65535. 
> works for me.

LOL I don't think so! TCP packets do not have enough bits allocated for
port numbers to support this, so 492716 is *unaddressable* over TCP. I
think the only explanation for successful behaviour would be some sort
of overflow or truncation behaviour. What is the value of 492716 if you
truncate it to 16 bits? 33964? I suggest that if you are communicating
over TCP port "492716", you are in reality using TCP port "33964". Same
with UDP ports, I'm sure.





More information about the plug mailing list