[Dshield] Port :67-68

Stephan Odak Stephan.Odak at fpawww.com
Wed Jul 25 19:16:40 GMT 2001


Ports 67 and 68 are Microsoft DHCP. A machine is advertising for DHCP
servers to acknowledge.

Stephan Odak

 -----Original Message-----
From: 	Paul Marsh [mailto:pmarsh at nmefdn.org] 
Sent:	Wednesday, July 25, 2001 11:40 AM
To:	'dshield at dshield.org'
Subject:	[Dshield] Port :6666 question

I read Ryan J Betz idea on blocking out bound :6666-:6668 traffic to see
what would be captured by my firewall.  Well hopefully someone can tell me
what this traffic means.

Source 0.0.0.0:68  Destination 255.255.255.255:67

I'm taking a guess that this is something broadcasting out for any response.
I'd like to hunt this thing down, con some one point me in the right
direction.

Thanx, Paul


_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/dshield
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 2854 bytes
Desc: not available
Url : http://www.dshield.org/pipermail/list/attachments/20010725/b7682cf6/attachment.bin


More information about the list mailing list