-
January 13th, 2009, 06:47 PM
#1
UDP Traffic
I am seeing an unusually large amount of UDP traffic in my router logs today...2 seperate sites...different ISPs
Anyone else??
MLF
How people treat you is their karma- how you react is yours-Wayne Dyer
-
January 13th, 2009, 07:08 PM
#2
Not today, but this happened to me at my home last year. I run some jobs at night that backup data from the office to the house. They failed. When I investigated I found several sites bombarding us with UDP traffic. I captured some sample traffic and contacted my ISP's security department. Turns out, they were the culprit.... a bad router change. It took several days of badgering them in order to get them to look into it. Once they looked, they figured it out pretty quickly, but we were down for about a week.
Comcast Sucks.
CSR
In God We Trust....Everything else we backup.
-
January 13th, 2009, 07:17 PM
#3
yeah.....2 seperate providers...although up here in the great white north ISPs providing DSL "lease" the infrastructure from ma Bell.....
I think I could blame it on Bell Canada and their throttling or "shaping" practices...
and incompetent configuration and traffic management
MLF
How people treat you is their karma- how you react is yours-Wayne Dyer
-
January 14th, 2009, 08:31 AM
#4
What destination port is being hit?
Oliver's Law:
Experience is something you don't get until just after you need it.
-
January 14th, 2009, 03:47 PM
#5
I think its some one torrenting on my LAN...which is against policy...
destination ports 33435-33442
has stopped...
am digging deeper today
probably the same activity on the other site. I only used it to compare activity....that other site I dont manage full time....have access to everything still...they only call me when they break things and cant fix them
MLF
How people treat you is their karma- how you react is yours-Wayne Dyer
-
January 15th, 2009, 07:33 AM
#6
Those ports don't mean anything to me, but it could be torrents indeed.
Oliver's Law:
Experience is something you don't get until just after you need it.
-
January 15th, 2009, 09:26 AM
#7
I would go with torrents, I actually use those particular ports to bypass my work perimeter
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
-
January 15th, 2009, 12:50 PM
#8
yeap...youporn dot com
I guess thats the youtube for p0rn
Fricken execs .....
Sometimes I hate my job
not sure whats on with the other site.........lots of UDP...different ports....probably the same type of shite...
Probably another exec too
MLF
How people treat you is their karma- how you react is yours-Wayne Dyer
-
January 15th, 2009, 03:42 PM
#9
Youtube for porn is redtube.com btw :P
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
-
January 15th, 2009, 05:37 PM
#10
pfft. Now stop adding crap to the post and help the original problem out.
In God We Trust....Everything else we backup.
Similar Threads
-
By Nokia in forum The Security Tutorials Forum
Replies: 0
Last Post: October 23rd, 2006, 04:58 PM
-
By Tiger Shark in forum The Security Tutorials Forum
Replies: 0
Last Post: October 7th, 2004, 07:18 PM
-
By gore in forum Newbie Security Questions
Replies: 11
Last Post: December 29th, 2003, 08:01 AM
-
By mathgirl32 in forum IDS & Scanner Discussions
Replies: 10
Last Post: February 3rd, 2003, 07:20 PM
-
By Noble Hamlet in forum AntiOnline's General Chit Chat
Replies: 1100
Last Post: March 17th, 2002, 09:38 AM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|