Re: Strange Traffic UDP port 8193
Date: 13 Jul 2005 22:17:40 -0000 To: email@example.com('binary' encoding is not supported, stored as-is) MS Windows NT based products use RPC (Remote Procedure Call) protocol listener and services starting at port 1025 and above, dynamically. It is likely you have services hosted on those machines and that is RPC traffic from client to client. Fairly unavoidable in an MS network. Although RPC ports can be restricted in the registry to ease security design in some cases like MS Exchange servers on the perimeter.
CISSP-ISSEP, CISM, MCSE NT/2000, CCNA, CCA