Sniff the traffic... :)
*ASB *(My XeeSM Profile) <http://XeeSM.com/AndrewBaker> *Exploiting Technology for Business Advantage...* * * On Thu, Sep 16, 2010 at 11:22 AM, Raper, Jonathan - Eagle < [email protected]> wrote: > We’re getting ready to decommission an old router, and almost all of the > traffic to and through it (except broadcast) has stopped. I'm reviewing the > syslog, and keep seeing this: > > 9/16/2010 8:36:50 AM [*Internal Router **Private **IP Address*] > Informational SEC-6-IPACCESSLOGP 651364: 44w0d: %SEC-6-IPACCESSLOGP: list > permit_any permitted udp [*ESX **P**rivate IP Address*](0) -> > 72.18.205.156(0), 1 packet > > I've asked our VMware admin to look over his host configuration to make > sure he isn’t pointing to the old router, but he says everything is "fine." > > Anyone else seen this or have any ideas as to why I'm seeing this traffic? > > Upon Googling said IP Address, it appears that it may be part of > pool.ntp.org, but I cannot confirm this. This host is located in > Warminster, PA, according to some sites. > > Jonathan L. Raper, A+, MCSA, MCSE > Technology Coordinator > Eagle Physicians & Associates, PA > [email protected] > www.eaglemds.com > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
