Re: Where comes 10.211.192.1 (UDP, Port 67) ?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Jim Hughes (NOSPAMJ3033_at_Hotmail.com)
Date: 03/12/04


Date: Fri, 12 Mar 2004 09:12:40 -0800

Network 10 is reserved for internal networks, therefore it is from the
inside.

UDP Ports 67 and 68 are for BootP (DHCP).

It's a DHCP response from a DHCP Server at 10.211.192.1. It is sent to the
broadcast (255) because the client doesn't have an IP address yet.

"Anony" <anony@mshome.net> wrote in message
news:c2spdr$rpu$1@news4.tilbu1.nb.home.nl...
> Hi All,
>
> Recently I get strange UDP packets from 10.211.192.1:67 to
> 255.255.255.255:68 (Win NT5.1).
> It comes always 2 packets in 2 seconds! Length with head is always 576
byte,
> no data sniffed.
>
> I don't know what is happening and where it comes from. Does anyone know
> about it? Is it possible hacker?
>
> Thanks for any tip
>
>



Relevant Pages

  • [SLE] Dual NICs
    ... Has anyone had any experience with a dual-homed machine? ... its info from a DHCP server, the other one has a static IP address. ... static is only used for a few internal networks. ... Please read the FAQs: suse-linux-e-faq@suse.com ...
    (SuSE)
  • Re: basic question about assigning ip address
    ... do you have admin control over the dhcp server? ... one out but I'm sure it can be done) is to monitor traffic on your NIC ... with tcpdump, filtering for DHCP response. ... server then tcpdump could assist you with that. ...
    (Fedora)