TCP/53 HACKER????

[Mark.Andrews at nominum.com]

> I just found a few TCP/53 connections to some of my company machines.  I
> know what UDP/53 is for.  What is TCP 53 for?  Is someone tellneting to port
> 53?  After finding these suspicious TCP/53 port I did some AWK queries on my
> logs.  Found several forign TCP/53 connections to some of my boxes.  Found a
> some with data transfer and a few with large data transfer (1 or 2 meg).
> Havent had time to investigate..(Corporate firedrill).  Any clue to what is
> going on.  I know I should read.  Just asking.  Thanks
> 
> Ross

	DNS uses both TCP and UDP.

	Mark
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com