Re: Strange Traffic UDP port 8193

[email protected]
Newsgroups gmane.comp.security.incidents
Message-ID <[email protected]>
MS Windows NT based products use RPC (Remote Procedure Call) protocol listener and services starting at port 1025 and above, dynamically.  It is likely you have services hosted on those machines and that is RPC traffic from client to client.  Fairly unavoidable in an MS network.  Although RPC ports can be restricted in the registry to ease security design in some cases like MS Exchange servers on the perimeter.

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q154596

:-)

-=v00d00=-

CISSP-ISSEP, CISM, MCSE NT/2000, CCNA, CCA
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.