Is this Decisionmark SpyWare?

[Sam of California]

I happened to be capturing UDP packets for some other purpose and I got some
that seem to be spyware. If interested, see:

http://groups.google.com/groups?selm...erver.ntli.net

The important information from that is that the source port of the UDP
packets was 80 and the source IP was 65.215.158.8 (Decisionmark Corp) for 4
packets, each with a target port of 3210, 3213, 3214 and 3216. I am not a
TCP/IP specialist, but based on the answer I got in that other newsgroup, I
got the impression that this is SpyWare.

However now I notice that one of Decisionmark's two primary businesses is
TitanTV.com, which I use. So perhaps there is nothing for me to be concerned
about.

Does anyone think there is any reason to suspect there is some SpyWare
activity here?

[sponge]

On Thu, 13 Nov 2003 22:11:51 GMT, "Sam of California"
<samuel@socal.rr.com> wrote:

>I happened to be capturing UDP packets for some other purpose and I
got some
>that seem to be spyware. If interested, see:
>
>http://groups.google.com/groups?selm...erver.ntli.net
>
>The important information from that is that the source port of the
UDP
>packets was 80 and the source IP was 65.215.158.8 (Decisionmark Corp)
for 4
>packets, each with a target port of 3210, 3213, 3214 and 3216. I am
not a
>TCP/IP specialist, but based on the answer I got in that other
newsgroup, I
>got the impression that this is SpyWare.
>
>However now I notice that one of Decisionmark's two primary
businesses is
>TitanTV.com, which I use. So perhaps there is nothing for me to be
concerned
>about.
>
>Does anyone think there is any reason to suspect there is some
SpyWare
>activity here?

It sounds like they USE spyware, based on their privacy policy; they
seem a little like TiVO. However, if it was spyware, you'd be seeing
traffic going FROM your system, not coming TO it, and most likely,
TCP. Are you 100% positive that it's coming FROM Decisionmark? If it
were going to them, then those numbers would make a lot more sense.

http://titantv.com/ttv/menu/privacy.aspx

Sponge
Sponge's Secure Solutions
www.geocities.com/yosponge
My new email: yosponge2 att yahoo dott com