Richard Burdette wrote: > > Hello, > > I'm studying for the Support exam using the CiscoPress books > and Trouble > Shooting Campus Networks from Priscilla. I must say that the > Trouble > Shooting book is excellent on its own, but especially so as > compared to the > CiscoPress offerings.
Thanks. :-) > > Anyway I've been playing around with NetMonitor Are you referring to the NetMonitor application from ModemWizard? > and also some > newer Unix > ported packet capture utilities on various platforms and came > across > something on a .Net Enterprise server that has me puzzled. So you are running NetMonitor on the .Net server? > My > system is > continually (once a second) broadcasting to a destination port > of 192. UDP? Probably since TCP doesn't usually broadcast. That is strange. > A > lookup of ports reveals this is for OSU network monitoring > (Oregon State U). Uh, Ohio State. Don't blame us Oregonians. :-) > Anyway, could anyone shed some light on what application or > service on the > server is causing this? I have a theory. I wonder if it is NetMonitor itself. It might be looking for banner ads or gathering data for one of its tests? Do you see this traffic even when not using NetMonitor? Try Ethereal. It's a great free protocol analyzer. > I have always found tracking down an > application > causing packet output to be hard to find, does anyone have tips > on resolving > this type of scenario? It's truly a pain. The official list from the Internet Assigned Numbers Authority just says this, as you probably know: osu-nms 192/tcp OSU Network Monitoring System osu-nms 192/udp OSU Network Monitoring System # Doug Karl You could ask Doug?? :-) Are you sure it's not port 92, instead of port 192? That would make more sense. Here's what IANA says about 92: npp 92/tcp Network Printing Protocol npp 92/udp Network Printing Protocol Or maybe 192 is Hex?? Probably not though. That would be 402, which doesn't seem any more likely: genie 402/tcp Genie Protocol genie 402/udp Genie Protocol # Mark Hankin Sorry I can't be more help. Priscilla > > Thanks... > > Richard > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64020&t=64011 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
