Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 1857 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Weird Traffic & Port Number Constantly

chugger93
I can't figure this one out...

I'm always seeing on my reports traffic from port 32768 UDP.  It gets dropped by that port says something about Filenet TMS.  I've scoured the internet and can't find anything really solid about that or service.

My logs show just a bunch of this: 

14:12:49 Default DROP 	UDP 	68.87.72.133 	: 53	→ MY-IP-TAKEN-OUT :32768


It's always my #1 under:
Top dropped destination services/hosts   on the Network Security Tab

Anyone have any ideas on this?


This thread was automatically locked due to age.
Parents
  • 0
    port 53 is DNS, and that IP looks like it _might_ be a DNS server.

    Assuming it is valid DNS traffic, I'm not sure why it'd be getting dropped.

    Barry
  • 0 in reply to BarryG
    The IP must be comcast, as its reverse is:
    chic-cns03.area4.il.chicago.comcast.net.

    I have no idea why it would be getting dropped either, but then again its destination port is 32768, so thats probably why.  Its getting to the astaro and since theres no packet rule, its dropping off.
Reply
  • 0 in reply to BarryG
    The IP must be comcast, as its reverse is:
    chic-cns03.area4.il.chicago.comcast.net.

    I have no idea why it would be getting dropped either, but then again its destination port is 32768, so thats probably why.  Its getting to the astaro and since theres no packet rule, its dropping off.
Children
No Data