UDP packet from Server

nramesh25 · ‎08-04-2008

Hi,

We are using DELL-PE7250 servers, we are finding servers(10.37.32.2) are keep on sending UDP packets with port no:1228 to our Broadcast IP(10.37.32.63).

Can we know what is the use of this packet and how to stop? Pls find in attachment-captured packet details using ethereal

Thanks

thiru.vel10 · ‎08-05-2008

Please block this broadcast Traffic from router with applying ACL.

bmbreer · ‎08-05-2008

Thiru,

There's no need to block this traffic on the router as the TTL field in the IP header (see OP attachment) is 00. This traffic is never meant to leave the broadcast domain.

Ramesh,

If the OS on the server is Windows then you can try running a netstat -ba to see which binary is sending it.

nramesh25 · ‎08-05-2008

Hi bmbreer,

we are using Linux servers.

pls tell us netstat -ba what is the command? where should we use? servers are connected in L3 switch(cisco 4510R). L3 switch is connected to Router(cisco 3745).

Pls suggest and if you want anymore information let me know.

Thanks.