Re: Strange Traffic UDP port 8193

v00d00_at_seqr.com
Date: 07/14/05

  • Next message: RA Henrik Becker: "Re: Strange Traffic UDP port 8193"
    Date: 13 Jul 2005 22:17:40 -0000
    To: incidents@securityfocus.com
    
    
    ('binary' encoding is not supported, stored as-is) MS Windows NT based products use RPC (Remote Procedure Call) protocol listener and services starting at port 1025 and above, dynamically. It is likely you have services hosted on those machines and that is RPC traffic from client to client. Fairly unavoidable in an MS network. Although RPC ports can be restricted in the registry to ease security design in some cases like MS Exchange servers on the perimeter.

    http://support.microsoft.com/default.aspx?scid=kb;en-us;Q154596

    :-)

    -=v00d00=-

    CISSP-ISSEP, CISM, MCSE NT/2000, CCNA, CCA


  • Next message: RA Henrik Becker: "Re: Strange Traffic UDP port 8193"