Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Why so much UDP traffic on my exchange server

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> Server Publishing >> Why so much UDP traffic on my exchange server Page: [1]
Login
Message << Older Topic   Newer Topic >>
Why so much UDP traffic on my exchange server - 4.Feb.2002 9:02:00 PM   
skipster

 

Posts: 550
Joined: 12.Oct.2001
From: newport beach
Status: offline 		I used the secure mail wizard to publish my exchange 5.5 server, and everything seems to be running nice, HOWEVER what is with all this UDP traffic hitting my exchange box? and why ami i seeing ip's like 192.168.1.5. This is not on my lan and to the best of my knowledge they arent routable, nad my ISP blocks this range anyways. My ip scheme is 192.168.0.1 through 192.168.0.255

192.168.1.5, 4113, 247586, 8, 0, 4113, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4542
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 24.55.83.12, 4112, 247586, 8, 0, 4112, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4543
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.2, 2091, 133582, 8, 0, 2091, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4556
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.5, 4113, 111581, 8, 0, 4113, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4559
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 24.55.83.12, 4112, 111581, 8, 0, 4112, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4560
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.5, 4113, 79585, 8, 0, 4113, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4567
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 24.55.83.12, 4112, 79585, 8, 0, 4112, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4568
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.5, 4113, 77582, 8, 0, 4113, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4574
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 24.55.83.12, 4112, 77582, 8, 0, 4112, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4575
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.2, 2091, 109588, 8, 0, 2091, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4561
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.2, 2091, 72585, 8, 0, 2091, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4581
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.5, 4113, 72585, 8, 0, 4113, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4582
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 24.55.83.12, 4112, 72585, 8, 0, 4112, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4583
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.5, 4113, 71583, 8, 0, 4113, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4585
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 24.55.83.12, 4112, 71583, 8, 0, 4112, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4586
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.5, 4113, 93585, 8, 0, 4113, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4563
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 24.55.83.12, 4112, 93585, 8, 0, 4112, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4564
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.5, 4113, 90581, 8, 0, 4113, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4565
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 24.55.83.12, 4112, 90581, 8, 0, 4112, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4566
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 192.168.1.5, 4113, 73586, 8, 0, 4113, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4578
192.168.0.2, -, -, -, 2/4/2002, 10:34:28, fwsrv, SENTINAL, -, -, 24.55.83.12, 4112, 73586, 8, 0, 4112, UDP, UdpMap, -, -, -, 20000, 0, -, -, 2, 4579
Post #: 1
RE: Why so much UDP traffic on my exchange server - 5.Feb.2002 8:26:00 AM   
tshinder

 

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online 		Hi Skip,

Looks like you need to find who is using 192.168.1.5.

HTH,
Tom

------------------
http://www.isaserver.org/shinder/


Get It Here!


(in reply to skipster)
Post #: 2
RE: Why so much UDP traffic on my exchange server - 5.Feb.2002 4:23:00 PM   
skipster

 

Posts: 550
Joined: 12.Oct.2001
From: newport beach
Status: offline 		No one on my network has this ip my scheme is 192.168.0.1 through 192.168.0.255. So is this a spoof

(in reply to skipster)
Post #: 3
RE: Why so much UDP traffic on my exchange server - 5.Feb.2002 5:30:00 PM   
Kirill

 

Posts: 205
Joined: 26.Sep.2001
Status: offline 		Hi skipster,
Check your subnet mask. It should be something like 255.255.255.0 or even more restrictive for your IP scheme. Otherwise, in case of 255.255.0.0 192.168.1.5 is still on your local subnet.

------------------
Regards,
Kirill
MCSE, Corporate SAP & Network security officer


(in reply to skipster)
Post #: 4
RE: Why so much UDP traffic on my exchange server - 5.Feb.2002 7:13:00 PM   
skipster

 

Posts: 550
Joined: 12.Oct.2001
From: newport beach
Status: offline 		My subnet mask is fine. Its 255.255.255.0 it gets handed out by my DHCP server. THIS IP DOENST BELONG IN MY NETWORK

(in reply to skipster)
Post #: 5
RE: Why so much UDP traffic on my exchange server - 7.Feb.2002 5:00:00 PM   
Kirill

 

Posts: 205
Joined: 26.Sep.2001
Status: offline 		Hi skipster,
Do a tracert 192.168.1.5 from your Exchange server and see how it gets there [Smile]

(in reply to skipster)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> Server Publishing >> Why so much UDP traffic on my exchange server Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts