*** From dhcp-server -- To unsubscribe, see the end of this message. ***

Yes, we captured some traffic but the person performing the capture only
captured broadcast traffic.  It showed UDP packets coming from source
port 1025 to dest port 1025 to broadcast address.  I have asked the
person to capture all directed traffic to and from the server and am
currently waiting for that capture.

I will check into the virus theory.

Thanks...Jill.
-----Original Message-----
From: Jeff Taylor <[EMAIL PROTECTED]>
To: Jill K. Smith <[EMAIL PROTECTED]>
Date: Tuesday, October 19, 1999 10:22 AM
Subject: Re: Port 1025 Broadcasts


>Jill,
>
>Have you captured any traffic? I would suspect some kind of virus on
the
>work stations.
>
>Jeff
>
>
>At 10:04 AM 10/19/99 -0400, you wrote:
>>    *** From dhcp-server -- To unsubscribe, see the end of this
message. ***
>>
>>Has anyone ever seen Windows 95 workstations who are DHCP clients
start
>>broadcasting to port 1025 (network blackjack) whenever the station
gets
>>a new lease?  This has started happening at one of our sites.  No
>>stations that are statically addressed are doing this and it only
>>happens on workstations that get a new lease that day (ie. when
station
>>turned back on in the morning after being shut off at night).
>>
>>This broadcast traffic is causing our router's CPU utilization to go
up
>>to unacceptable levels.  Please help if possible.  Thanks!
>>
>>Jill K. Smith
>>Lockheed Martin
>>919-541-5323
>>[EMAIL PROTECTED]
>>
>>
>>
>>----------------------------------------------------------------------
-
>>List Archives : http://www.isc.org/ml-archives/dhcp-server/
>>Unsubscribe   : http://www.isc.org/dhcp-lists.html
>>-or-          : mailto:[EMAIL PROTECTED]?Subject=unsubscribe
>>----------------------------------------------------------------------
-
>
>


-----------------------------------------------------------------------
List Archives : http://www.isc.org/ml-archives/dhcp-server/
Unsubscribe   : http://www.isc.org/dhcp-lists.html    
-or-          : mailto:[EMAIL PROTECTED]?Subject=unsubscribe  
-----------------------------------------------------------------------

Reply via email to