Re: Strange Traffic UDP port 8193
RA Henrik Becker <[email protected]>
| Newsgroups | gmane.comp.security.incidents |
|---|---|
| Message-ID | <20050714064740.GG6224@linux> |
Hi there! > I was playing with Ethereal and found some broadcast traffic destinated > to the same port: 8193 (UDP) . The source port was changing from 1027 to > 1051 on each machine being different. Clients are running Windows 2000 and > XP. This just happens on a couple machines. Well, the port is not assigned. Had something similar with a Kyocera Printer once at a client's site. Took some time to figure that on out ... ;-) Did you check for any printers you don't know about yet? Can you post parts of the header of one of the packets? Viele Grüße / Best regards, Henrik Becker -- Rechtsanwalt Henrik Becker (Lawyer) [email protected] www.henrikbecker.de IT-Recht, IT-Forensik, Digitale Beweisführung, Arbeitsrecht Allgemeine Rechtsberatung und Vertretung