Periodic broadcast to port 2222

P

Perry Flinn

Every 12 minutes, Entourage sends a 96 byte UDP packet to the global
broadcast address (255.255.255.255). It does not coincide with any other
network activity related to Entourage. Each packet contains seemingly random
binary data. Does anyone know the purpose of these transmissions?

TIA
-perry
 
G

Gnarlodious

Entity Perry Flinn spoke thus:
Every 12 minutes, Entourage sends a 96 byte UDP packet to the global
broadcast address (255.255.255.255). It does not coincide with any other
network activity related to Entourage. Each packet contains seemingly random
binary data. Does anyone know the purpose of these transmissions?
Click to expand...
To check for other Office instances using the same serial number on the
local net.
But I'm curious how you log this port activity. Enlighten me.

--Gnarlie
 
P

Perry Flinn

Entity Perry Flinn spoke thus:

To check for other Office instances using the same serial number on the
local net.
But I'm curious how you log this port activity. Enlighten me.

--Gnarlie
Click to expand...

I first noticed this traffic while monitoring my network using ethereal on a
Windows box. On OSX, you can use tcpdump to display the packets:

tcpdump -s 128 -x udp port 2222

and you can use lsof to find out which process is sending them:

lsof -P +c22 -iudp:2222

Both of these need to be run from a root shell prompt (or with sudo).
 
Top