[Dshield] Port :67-68

Stephan Odak Stephan.Odak at fpawww.com
Wed Jul 25 19:16:40 GMT 2001

Ports 67 and 68 are Microsoft DHCP. A machine is advertising for DHCP
servers to acknowledge.

Stephan Odak

 -----Original Message-----
From: 	Paul Marsh [mailto:pmarsh at nmefdn.org] 
Sent:	Wednesday, July 25, 2001 11:40 AM
To:	'dshield at dshield.org'
Subject:	[Dshield] Port :6666 question

I read Ryan J Betz idea on blocking out bound :6666-:6668 traffic to see
what would be captured by my firewall.  Well hopefully someone can tell me
what this traffic means.

Source  Destination

I'm taking a guess that this is something broadcasting out for any response.
I'd like to hunt this thing down, con some one point me in the right

Thanx, Paul

Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 2854 bytes
Desc: not available
Url : http://www.dshield.org/pipermail/list/attachments/20010725/b7682cf6/attachment.bin

More information about the list mailing list