[CLUG-tech] Ports 1026-1028/udp?

Neil Blakey-Milner nbm at nxsy.org
Tue Dec 11 10:42:37 SAST 2007


On 12/11/07, Johann Spies <jspies at sun.ac.za> wrote:
> On my mailservers I find the following report by fwanalog (the IP Address
> being the external interface of the mail server):
>
>
>     621:  99.20%: 306.92: Dec/10/07 11:58 PM:   146.232.64.21/udp
>     221:  35.30%: 107.56: Dec/10/07 11:58 PM:     146.232.64.21:1026/udp
>     197:  31.47%:  98.50: Dec/10/07 11:58 PM:     146.232.64.21:1027/udp
>     197:  31.47%:  98.50: Dec/10/07 11:58 PM:     146.232.64.21:1028/udp
>       6:   0.96%:   2.37: Dec/10/07  3:47 PM:     146.232.64.21:ms-sql-m (1434)/udp
>
> So far I could not find out what is causing this traffic.
>
> I am running exim, spamassassin (with razor de-activated at this moment),
> clamav and postgresql on the servers.
>
> Any idea on what it is?

DNS, probably.  The local port when talking to port 53 on name servers.

Neil
-- 
Neil Blakey-Milner
http://nxsy.org/
nbm at nxsy.org


More information about the clug-tech mailing list