[plug] Attempted Intrusions

[Tim White]

James Devenish wrote:

>In message <417E3E60.30308 at tigris.org>
>on Tue, Oct 26, 2004 at 08:09:04PM +0800, Tim White wrote:
>  
>
>>>>492716
>>>>        
>>>>
>>>The highest port supported by TCP/IP is port 65535. 
>>>      
>>>
>>works for me.
>>    
>>
>
>LOL I don't think so! TCP packets do not have enough bits allocated for
>port numbers to support this, so 492716 is *unaddressable* over TCP. I
>think the only explanation for successful behaviour would be some sort
>of overflow or truncation behaviour. What is the value of 492716 if you
>truncate it to 16 bits? 33964? I suggest that if you are communicating
>over TCP port "492716", you are in reality using TCP port "33964". Same
>with UDP ports, I'm sure.
>
Yep. A quick test proves you right. Thanks
Tim

-- 
Tim White
PGP/GPG id: 602E944D, Pub Key Serv: subkeys.pgp.net
Fingerprint: 04C2 9682 B7B2 3006 009D  A9F3 067E EDCD 602E 944D
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!
--

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
URL: <http://lists.plug.org.au/pipermail/plug/attachments/20041026/055b6a28/attachment.pgp>