*** From dhcp-server -- To unsubscribe, see the end of this message. ***
Yes, we captured some traffic but the person performing the capture only
captured broadcast traffic. It showed UDP packets coming from source
port 1025 to dest port 1025 to broadcast address. I have asked the
person to capture all directed traffic to and from the server and am
currently waiting for that capture.
I will check into the virus theory.
Thanks...Jill.
-----Original Message-----
From: Jeff Taylor <[EMAIL PROTECTED]>
To: Jill K. Smith <[EMAIL PROTECTED]>
Date: Tuesday, October 19, 1999 10:22 AM
Subject: Re: Port 1025 Broadcasts
>Jill,
>
>Have you captured any traffic? I would suspect some kind of virus on
the
>work stations.
>
>Jeff
>
>
>At 10:04 AM 10/19/99 -0400, you wrote:
>> *** From dhcp-server -- To unsubscribe, see the end of this
message. ***
>>
>>Has anyone ever seen Windows 95 workstations who are DHCP clients
start
>>broadcasting to port 1025 (network blackjack) whenever the station
gets
>>a new lease? This has started happening at one of our sites. No
>>stations that are statically addressed are doing this and it only
>>happens on workstations that get a new lease that day (ie. when
station
>>turned back on in the morning after being shut off at night).
>>
>>This broadcast traffic is causing our router's CPU utilization to go
up
>>to unacceptable levels. Please help if possible. Thanks!
>>
>>Jill K. Smith
>>Lockheed Martin
>>919-541-5323
>>[EMAIL PROTECTED]
>>
>>
>>
>>----------------------------------------------------------------------
-
>>List Archives : http://www.isc.org/ml-archives/dhcp-server/
>>Unsubscribe : http://www.isc.org/dhcp-lists.html
>>-or- : mailto:[EMAIL PROTECTED]?Subject=unsubscribe
>>----------------------------------------------------------------------
-
>
>
-----------------------------------------------------------------------
List Archives : http://www.isc.org/ml-archives/dhcp-server/
Unsubscribe : http://www.isc.org/dhcp-lists.html
-or- : mailto:[EMAIL PROTECTED]?Subject=unsubscribe
-----------------------------------------------------------------------