NETMON question

Where can I find some information for network trace?

I have an UDP (54155) and (88) Unknown.

I need to know what exactly this is?

--
Eric Sabo
NT Administrator

Will actually looking into the content of the packets tell you anything?
Those ports numbers don't tell you anything,...they could be almost an
unlimited number of anything.


--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"Sabo, Eric" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Where can I find some information for network trace?
>
> I have an UDP (54155) and (88) Unknown.
>
> I need to know what exactly this is?
>
> --
> Eric Sabo
> NT Administrator
>
>

>Will actually looking into the content of the packets tell you anything?
>Those ports numbers don't tell you anything,...they could be almost an
>unlimited number of anything.
>
>
>--
>
>Phillip Windell [MCP, MVP, CCNA]
>www.wandtv.com
>
>
>"Sabo, Eric" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed)...
>> Where can I find some information for network trace?
>>
>> I have an UDP (54155) and (88) Unknown.
>>
>> I need to know what exactly this is?
>>
>> --
>> Eric Sabo
>> NT Administrator
>>
>>
>
>
>
Eric,

UDP 88 is Kerberos Traffic and the 54155 is an ephemeral port that can be almost anything. What specifically are you looking for with respect to these
ports?

A good site to locate the protocols that use ports is the IANA site:

http://www.iana.org/assignments/port-numbers

if you are looking to determine what process is using a particular port number then I recommend using TCPView from www.sysinternals.com

Hope this answers your question

T.J. Campana [MSFT]
Microsoft EPS Networking
--
This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they originated.

"TJ Campana [MSFT]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> if you are looking to determine what process is using a particular port
number then I recommend using TCPView from www.sysinternals.com

I may have to check on that one myself.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Ah! Yes,...I already have it and a bunch of other stuff from them. Amazing
what you can find laying around on a file server that you didn't remember
you had..


--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"Phillip Windell" <@.> wrote in message
news:(E-Mail Removed)...
> "TJ Campana [MSFT]" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > if you are looking to determine what process is using a particular port
> number then I recommend using TCPView from www.sysinternals.com
>
> I may have to check on that one myself.
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>