I am running Mandrake 9.1 and Windows XP home edition on my home network. Tonight I was sitting here and ZoneAlarm popped up saying it had blocked an access attempt from 10.0.0.2, which is the IP of my Linux box, on UDP port 1697. My Linux box is always on, although I haven't used it in about a week. Just wondering if anyone has seen anything similar before? Oh, I'm not running any servers on my Linux box, I have the Linux firewall set to high, and both computers are behind a router. Any help would be appreciated.

Thanks

check this page

http://www.linnetsol.co.uk/port-num1.htm

Thanks for the fast reply! One more question:

Okay, so port 1697 is running rrisat...which apparently has something to do with Recognition Research Inc...Any idea on what program may have been using this port? Did some value in a daemon magically become true which caused it to try to network itself?

I only ask because I've had these computers networked for about two months, and this it the first time anything like this has happened. I haven't even touched my linux box in a couple of weeks because I've been too busy so it couldn't have been anything I've done recently...

Or could it simply be junk traffic?

Thanks again,
RandomIZE

No problem

I have no clue what service that is.. and checking my pc there's nothing on that port..
Do a search on google for it..

Try netstat and/or add a few of the switches behind /a etc....
that should gove you an idea if there's anything legit at least that's running...

I'd install a firewall and a few more things if i was you...

*got portmapper, snort, iptables, netsaint and a few more running here now*

And Nope, i'm not paranoid, 'cause i don't have that on paper yet...

Ok, I'll definately do that. Thanks a lot for your help!

No Problem...