[ale] UDP port 11011, anyone know what it is?

Tony Carter tcarter at entrusion.com
Tue Feb 23 10:09:21 EST 2010


On Tue, Feb 23, 2010 at 9:38 AM, Greg Freemyer <greg.freemyer at gmail.com>wrote:

> On Tue, Feb 23, 2010 at 3:40 AM, Michael B. Trausch <mike at trausch.us>
> wrote:
> > I am seeing some _really_ suspect net activity at a client site, and am
> > finding little.  (Note, net is a Windows net---that's out of my hands,
> > unfortunately.)
> >
> > Does anyone know what UDP 11011 is used for and why a system would be
> > sending packets to different machines at a regular (30 second) interval
> > on that port?  I have yet to make any sense of the data in the packets.
> >
> >        --- Mike
>
> If you have access to the PC, netstat -nb should work, if not  Try tcpview
: http://live.sysinternals.com/ (The name is misleading, it shows tcp and
udp)

-Tony
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20100223/64f1e395/attachment.html 


More information about the Ale mailing list