Re: Strange Traffic

[Vincent Lape <vlape () me com>]

Can you give a tcpdump of the traffic?



On Aug 25, 2010, at 10:54 AM, Craig Freyman <craigfreyman () gmail com> wrote:

> I'm trying to understand why a number of client computers are sending UDP 500 traffic to strange places. For example, 
> from one machine it is sending traffic to 209.85.225.166 which is owned by Google. Netstat tells me that the traffic 
> is originating from SVCHOST.
>
> I thought UDP 500 was used for IKE but is it also used for some sort of keep alive? I'm confused!
>
> Thanks,
> C
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com