Re: Strange Traffic

[Bugbear <gbugbear () gmail com>]

Its not their new voice chat that popped up in my gmail account today is it?

T

On 8/25/10, Craig Freyman <craigfreyman () gmail com> wrote:
> Its happens when someone has a gmail account open. It must be the chat
> feature?
>
> On Wed, Aug 25, 2010 at 1:33 PM, Craig Freyman
> <craigfreyman () gmail com>wrote:
>
> > I think it might be Bonjour?
> >
> >  [mDNSResponder.exe]  UDP    [::]:500               *:*
> >                1044
> >
> >
> >
> > On Wed, Aug 25, 2010 at 1:27 PM, Craig Freyman
> > <craigfreyman () gmail com>wrote:
> >
> > > A lot. Is there a utility like process explorer that can tell me the
> > > subprocesses of svchost and the port they're using?
> > >
> > >
> > > On Wed, Aug 25, 2010 at 12:09 PM, Bugbear <gbugbear () gmail com> wrote:
> > >
> > > > Also what is running under SVCHOST?
> > > >
> > > > On Wed, Aug 25, 2010 at 2:05 PM, Vincent Lape <vlape () me com> wrote:
> > > > > Can you give a tcpdump of the traffic?
> > > > >
> > > > >
> > > > >
> > > > > On Aug 25, 2010, at 10:54 AM, Craig Freyman <craigfreyman () gmail com>
> > > > wrote:
> > > > > I'm trying to understand why a number of client computers are sending
> > > > UDP
> > > > > 500 traffic to strange places. For example, from one machine it is
> > > > sending
> > > > > traffic to 209.85.225.166 which is owned by Google. Netstat tells me
> > > > that
> > > > > the traffic is originating from SVCHOST.
> > > > > I thought UDP 500 was used for IKE but is it also used for some sort
> > > > > of
> > > > keep
> > > > > alive? I'm confused!
> > > > > Thanks,
> > > > > C
> > > > >
> > > > >
> > > > > _______________________________________________
> > > > > Pauldotcom mailing list
> > > > > Pauldotcom () mail pauldotcom com
> > > > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > > > Main Web Site: http://pauldotcom.com
> > > > >
> > > > > _______________________________________________
> > > > > Pauldotcom mailing list
> > > > > Pauldotcom () mail pauldotcom com
> > > > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > > > Main Web Site: http://pauldotcom.com
> > > > _______________________________________________
> > > > Pauldotcom mailing list
> > > > Pauldotcom () mail pauldotcom com
> > > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > > Main Web Site: http://pauldotcom.com

-- 
Sent from my mobile device
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com