Re: UDP traffic on port 48864
Andrew Daviel <[email protected]> Mon, 4 Jul 2005 18:47:12 -0700 (PDT)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
On Sat, 25 Jun 2005, Jon Hedlund wrote: > >>Andrew Daviel wrote Monday, June 13, 2005 6:42 PM > >>> I've been seeing UDP traffic sent to a host here on port 48864; it seems > It's appears to be responding to both the TCP and UDP packets which > means there's a program listening on that port, both TCP and UDP. You > can use the freeware TCPView at > http://www.sysinternals.com/Utilities/TcpView.html to identify what app > is listening on that port. Thanks for the tip. (Linux equiv would be lsof) Seems like it's the Skype client. However, there's a lot more traffic (i.e. destinations) than can be explained by exchanging presence information with the users's buddies. I've mailed skype; maybe they'll respond. -- Andrew Daviel, TRIUMF, Canada Tel. +1 (604) 222-7376 (Pacific Time) [email protected] _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions