Logs to a destination port that not configured

Hello,

I need your help to understand some logs for a rule :

For example my rule contain :

Src : IP_A, IP_B ...; Dst : IP_O, IP_Z, Service ; ftp(21),telnet(23)and tcp 6058

in my logs on the forianalyzer I can some others dst port value.

It's possible? There are some explinations for that?

Thank you

Best answer by badrgb

Good morning,

I think the only explination is the presence of the ftp in my rule.

badrgbAuthorAnswer

Visitor III

Good morning,

I think the only explination is the presence of the ftp in my rule.

Sign up