Re: Strange Traffic UDP port 8193
v00d00_at_seqr.com
Date: 07/14/05
- Previous message: Julius Ganns: "Re: Strange Traffic UDP port 8193"
- Maybe in reply to: Munoz, Hector: "Strange Traffic UDP port 8193"
- Next in thread: RA Henrik Becker: "Re: Strange Traffic UDP port 8193"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 13 Jul 2005 22:17:40 -0000 To: incidents@securityfocus.com('binary' encoding is not supported, stored as-is) MS Windows NT based products use RPC (Remote Procedure Call) protocol listener and services starting at port 1025 and above, dynamically. It is likely you have services hosted on those machines and that is RPC traffic from client to client. Fairly unavoidable in an MS network. Although RPC ports can be restricted in the registry to ease security design in some cases like MS Exchange servers on the perimeter.
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q154596
:-)
-=v00d00=-
CISSP-ISSEP, CISM, MCSE NT/2000, CCNA, CCA
- Previous message: Julius Ganns: "Re: Strange Traffic UDP port 8193"
- Maybe in reply to: Munoz, Hector: "Strange Traffic UDP port 8193"
- Next in thread: RA Henrik Becker: "Re: Strange Traffic UDP port 8193"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]