psad

[solace]

Guys, just started using psad on my backtrack machine. Love the tool but I'm a little concerned about a scan I keep seeing. it's UDP port 21302. I'm assuming this is botnet traffic. Any thoughts.

[KMDave]

Could it be that you are using IRC with the BitchX client?

Also just run a netstat -anp to see which process is having this port in use.