Security Incidents mailing list archives

Re: Strange Traffic UDP port 8193


From: v00d00 () seqr com
Date: 13 Jul 2005 22:17:40 -0000

MS Windows NT based products use RPC (Remote Procedure Call) protocol listener and services starting at port 1025 and 
above, dynamically.  It is likely you have services hosted on those machines and that is RPC traffic from client to 
client.  Fairly unavoidable in an MS network.  Although RPC ports can be restricted in the registry to ease security 
design in some cases like MS Exchange servers on the perimeter.

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q154596

:-)

-=v00d00=-

CISSP-ISSEP, CISM, MCSE NT/2000, CCNA, CCA


Current thread: