[Dshield] Port :67-68
Stephan.Odak at fpawww.com
Wed Jul 25 19:16:40 GMT 2001
Ports 67 and 68 are Microsoft DHCP. A machine is advertising for DHCP
servers to acknowledge.
From: Paul Marsh [mailto:pmarsh at nmefdn.org]
Sent: Wednesday, July 25, 2001 11:40 AM
To: 'dshield at dshield.org'
Subject: [Dshield] Port :6666 question
I read Ryan J Betz idea on blocking out bound :6666-:6668 traffic to see
what would be captured by my firewall. Well hopefully someone can tell me
what this traffic means.
Source 0.0.0.0:68 Destination 255.255.255.255:67
I'm taking a guess that this is something broadcasting out for any response.
I'd like to hunt this thing down, con some one point me in the right
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 2854 bytes
Desc: not available
Url : http://www.dshield.org/pipermail/list/attachments/20010725/b7682cf6/attachment.bin
More information about the list