OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Strange Traffic UDP port 8193

v00d00seqr.com
Date: Wed Jul 13 2005 - 17:17:40 CDT


MS Windows NT based products use RPC (Remote Procedure Call) protocol listener and services starting at port 1025 and above, dynamically. It is likely you have services hosted on those machines and that is RPC traffic from client to client. Fairly unavoidable in an MS network. Although RPC ports can be restricted in the registry to ease security design in some cases like MS Exchange servers on the perimeter.

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q154596

:-)

-=v00d00=-

CISSP-ISSEP, CISM, MCSE NT/2000, CCNA, CCA