On Sun, 9 May 2004, TSaplin Mikhail wrote: > Recently I wrote, that I have litle traffic to GATEKEEPER.MCAST.NET, > (tcpdump show this: > 20:32:41.496039 129dial.supernet.kz.52075 > GATEKEEPER.MCAST.NET.1718: udp 31 > ) > > David Malone <[EMAIL PROTECTED]> on my question wrote: > >Does sockstat show which process is using port 52075? > No, sockstat show nothing about this. > > I've installed new system due express installation - but packets is steel > going. > > Maybe this is going on your 5.1 system, and is this right?
Those are multicast UDP packets being sent by an H.323 endpoint application trying to find a local H.323 gatekeeper. Since they are multicast, they will stay within your LAN unless you have explicitly configured a router or tunnel to carry them out of it. Totally harmless, unless you really don't want any H.323-enabled applications installed and running. Use sockstat to look for anything listening on the 224.0.1.41 (gatekeeper.mcast.net) address. -- Chris Dillon - cdillon(at)wolves.k12.mo.us FreeBSD: The fastest, most open, and most stable OS on the planet - Available for IA32, IA64, AMD64, PC98, Alpha, and UltraSPARC architectures - PowerPC, ARM, MIPS, and S/390 under development - http://www.freebsd.org Q: Because it reverses the logical flow of conversation. A: Why is putting a reply at the top of the message frowned upon? _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
