Re: Strange UDP Activity

From: Valdis.Kletnieksat_private
Date: Tue Apr 16 2002 - 12:03:29 PDT

  • Next message: Stephen Friedl: "Re: Strange UDP Activity"

    On Tue, 16 Apr 2002 13:09:30 EDT, Rajiv Dighe <rdigheat_private>  said:
    > Port 1067 is also used by Installation Bootstrap Protocol Server. Apparently
    > on default win2k server install this port is utilized. details are available
    > at http://support.microsoft.com/default.aspx?scid=kb;EN-US;q289241
    > 
    > This could be an attempt to map out hosts running win2k servers in default
    > install. This is apparently also used by HP boxes. i.e. you can setup one
    
    Wasn't there an issue where Windows Active Directory would try to find a likely
    DNS server to register itself in, and if it failed, it would go harass a root
    server and try to register itself there?  This would explain traffic coming
    back from root servers back to the bootstrap server....
    -- 
    				Valdis Kletnieks
    				Computer Systems Senior Engineer
    				Virginia Tech
    
    
    
    
    



    This archive was generated by hypermail 2b30 : Tue Apr 16 2002 - 13:29:07 PDT