Re: Strange UDP Activity

[Valdis.Kletnieks () vt edu]

On Tue, 16 Apr 2002 13:09:30 EDT, Rajiv Dighe <rdighe () SANDVINE com>  said:
> Port 1067 is also used by Installation Bootstrap Protocol Server. Apparently
> on default win2k server install this port is utilized. details are available
> at http://support.microsoft.com/default.aspx?scid=kb;EN-US;q289241
>
> This could be an attempt to map out hosts running win2k servers in default
> install. This is apparently also used by HP boxes. i.e. you can setup one

Wasn't there an issue where Windows Active Directory would try to find a likely
DNS server to register itself in, and if it failed, it would go harass a root
server and try to register itself there?  This would explain traffic coming
back from root servers back to the bootstrap server....
-- 
                                Valdis Kletnieks
                                Computer Systems Senior Engineer
                                Virginia Tech

Attachment: _bin
Description: