Re: Strange portscan traffic with dest of 169.254.x.x

[dhottinger () harrisonburg k12 va us]

Quoting Aaron Giuoco <agiuoco () yahoo com>:

> True.  But it is unusual to see so much traffic from 169.254 leaving  
>  a computer that already has a network connection.
>
> I haven't been able to confirm whether the packets are related to   
> ActiveSync like Paul mentioned.  Thanks for the replies.  I'll try   
> to confirm whether or not ActiveSync is being used on these PCs or   
> not and post back.
>
> AG
I missed part of this post.  However, I see lots of 169 traffic from  
my apple 10.4, 10.5 computers.  I think they use it for bonjour or  
entourage, which is a way to find printers, and other network resources.


-- 
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools

"Everything should be made as simple as possible, but not simpler."
-- Albert Einstein


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users