[unisog] rendezvous storm?

Harley, Chay Chay.Harley at kbcfp.com
Fri May 9 04:03:26 GMT 2008


>From http://www.dslreports.com/forum/remark,14361100

"Port 5353 is for the Music Sharing aspect of iTunes (Rendezvous, which
is now called Bonjour)"


-----Original Message-----
From: unisog-bounces at lists.dshield.org
[mailto:unisog-bounces at lists.dshield.org] On Behalf Of Fred Portnoy
Sent: Friday, May 09, 2008 3:21 AM
To: unisog at lists.dshield.org
Subject: [unisog] rendezvous storm?

If this has already been covered to death, please give me a hint where
to find it in the archives.

We sometimes get wiped out by a Windows machine on our network spewing
large numbers of packets per second aimed at multicast address
224.0.0.251 using UDP 5353. I can see such traffic as part of the
background noise which seems to be about media sharing .... but once it
a while it rises to apparently unhealthy heights, as it seems to be
co-incident with our router spiking at 100% CPU and ceasing to forward
traffic for a while. 

Can anyone point us to more knowledge on this subject?

thanks

-fp

Fred Portnoy
Network Analyst
Plymouth State University

"unfettered by edgy modernisms, or classical influences"
_______________________________________________
unisog mailing list
unisog at lists.dshield.org
https://lists.sans.org/mailman/listinfo/unisog

-- 
This message may contain confidential, proprietary, or legally privileged information. No confidentiality or privilege is waived by any transmission to an unintended recipient. If you are not an intended recipient, please notify the sender and delete this message immediately. Any views expressed in this message are those of the sender, not those of any entity within the KBC Financial Products group of companies (together referred to as "KBC FP"). 

This message does not create any obligation, contractual or otherwise, on the part of KBC FP. It is not an offer (or solicitation of an offer) of, or a recommendation to buy or sell, any financial product. Any prices or other values included in this message are indicative only, and do not necessarily represent current market prices, prices at which KBC FP would enter into a transaction, or prices at which similar transactions may be carried on KBC FP's own books. The information contained in this message is provided "as is", without representations or warranties, express or implied, of any kind. Past performance is not indicative of future returns.




More information about the unisog mailing list