Ted is looking at packet dumps of a scan and notices the flags UPF are set. He also notices the target port is always 31337. What does Ted conclude?
A) He is watching normal traffic
B) Someone is scanning for subseven
C) This is a harmless UDP scan
D) Someone is scanning for back orifice

Question

Quizplus · Accepted Answer

For this exam there are a few illicit server ports that you should memorize including;
31337 = Back Orifice;
27374 = Subseven;
7777 = Tini;
12345 = Netbus

Ted Is Looking at Packet Dumps of a Scan and Notices