Security Incidents mailing list archives
Re: Strange Traffic UDP port 8193
From: v00d00 () seqr com
Date: 13 Jul 2005 22:17:40 -0000
MS Windows NT based products use RPC (Remote Procedure Call) protocol listener and services starting at port 1025 and above, dynamically. It is likely you have services hosted on those machines and that is RPC traffic from client to client. Fairly unavoidable in an MS network. Although RPC ports can be restricted in the registry to ease security design in some cases like MS Exchange servers on the perimeter. http://support.microsoft.com/default.aspx?scid=kb;en-us;Q154596 :-) -=v00d00=- CISSP-ISSEP, CISM, MCSE NT/2000, CCNA, CCA
Current thread:
- Strange Traffic UDP port 8193 Munoz, Hector (Jul 13)
- Re: Strange Traffic UDP port 8193 Julius Ganns (Jul 13)
- Re: Strange Traffic UDP port 8193 RA Henrik Becker (Jul 14)
- Re: Strange Traffic UDP port 8193 Bob Cunningham (Jul 14)
- <Possible follow-ups>
- Re: Strange Traffic UDP port 8193 jas (Jul 13)
- Re: Strange Traffic UDP port 8193 v00d00 (Jul 14)
