Re: Dantz Retrospect, Piton multicast, security, and XP SP2

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Barry Margolin (barmar_at_alum.mit.edu)
Date: 08/28/04


Date: Sat, 28 Aug 2004 17:30:13 -0400

In article <5c0dbfb4.0408280550.4e67c184@posting.google.com>,
 jfaughnan@spamcop.net (John Faughnan) wrote:

> With your hints it was easy to find this referece.
>
> http://www.sgr.nada.kth.se/mac/docs/retrospect_ttl.html.en saying they
> use a TTL of 1.
>
> So they use a multicast IP address, but the packets will either die on
> my AirPort router, or at my ISP's router. They mention "port 497"
> packets on the Internet -- would that fit with an enterprise doing
> backup across the Internet? The enterprise would configure their
> router to pass that packet to another router they owned across the
> internet?

Port numbers are used to identify applications and client processes;
their use of port 497 is analogous to the way HTTP uses port 80 and DNS
uses port 53.

Since the packets have TTL of 1, they don't ever go through routers, so
there's no need to configure the routers to pass this port.

-- 
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***


Relevant Pages

  • Re: Solipsis: Python-powered Metaverse
    ... >>>through the same router, ... to be address *from* that particular port. ... was/is a steady stream of updates to both clients even if they send nothing ... > areas of>the packets it sends, the router usually can't properly rewrite ...
    (comp.lang.python)
  • Re: 2621 and pix how to find bandwidth abuser
    ... When I ping the router instead of <1ms I am ... minute input rate, 5 minute output rate, packets input, packets output). ... If you have a Cisco switch that supports SPAN, you might want to place a sniffer on a SPAN destination port and monitor source ports of interest. ...
    (comp.dcom.sys.cisco)
  • Re: [Fwd: Re: Nmap/netwag problem.]
    ... >> will not see a service behind the web port. ... telnet: connect to address Y.Y.Y.Y: Connection timed out ... and as for 2 repeats it will send to packets at whatever pps rate you asked it for so youll end up ... Added Y.Y.Y.Y port 113 ttl 226 ...
    (Pen-Test)
  • Re: [Full-disclosure] hiding routers
    ... patches also exist for the Linux kernel. ... mean that it actually forwards packets with TTL 0. ... How common is it that a router does not decrement the TTL of packets, ...
    (Full-Disclosure)
  • Re: Solipsis: Python-powered Metaverse
    ... >> wanted to participate on the port 6000 fun? ... >through the same router, ... >update packets so they can be reliably separated into two streams (and vice ... external computer knows nothing about the internal computer address. ...
    (comp.lang.python)