OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Strange Traffic UDP port 8193

From: RA Henrik Becker (RA.Beckerhenrikbecker.de)
Date: Thu Jul 14 2005 - 01:47:40 CDT


Hi there!

> I was playing with Ethereal and found some broadcast traffic destinated
> to the same port: 8193 (UDP) . The source port was changing from 1027 to
> 1051 on each machine being different. Clients are running Windows 2000 and
> XP. This just happens on a couple machines.

Well, the port is not assigned. Had something similar with a Kyocera Printer
once at a client's site. Took some time to figure that on out ... ;-)

Did you check for any printers you don't know about yet?

Can you post parts of the header of one of the packets?

Viele Grüße / Best regards,

Henrik Becker

--
Rechtsanwalt Henrik Becker (Lawyer)

RA.Beckerhenrikbecker.de www.henrikbecker.de

IT-Recht, IT-Forensik, Digitale Beweisführung, Arbeitsrecht
Allgemeine Rechtsberatung und Vertretung