Also what is running under SVCHOST?
On Wed, Aug 25, 2010 at 2:05 PM, Vincent Lape <[email protected]> wrote: > Can you give a tcpdump of the traffic? > > > > On Aug 25, 2010, at 10:54 AM, Craig Freyman <[email protected]> wrote: > > I'm trying to understand why a number of client computers are sending UDP > 500 traffic to strange places. For example, from one machine it is sending > traffic to 209.85.225.166 which is owned by Google. Netstat tells me that > the traffic is originating from SVCHOST. > I thought UDP 500 was used for IKE but is it also used for some sort of keep > alive? I'm confused! > Thanks, > C > > > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com > > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com > _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
