udp port 3337

This is a discussion on udp port 3337 within the Linux Security forums, part of the System Security and Security Related category; When I go online with my new ADSL internet link, it often happens that my iptables firewall blocks about 2 ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 01-19-2004
Michael Mueller
 
Posts: n/a
Default udp port 3337

When I go online with my new ADSL internet link, it often happens that
my iptables firewall blocks about 2 kilobytes/sec of incoming traffic on
udp port 3337 named "Direct TV Data Catalog". Can anybody tell me what
service and software this might be? Since this is a lot of bandwidth I
usually disconnect and reconnect with a different address.

The packages look like this:

19:32:50.808401 211.23.143.205.imdocsvc > 217.235.196.83.directv-catlg:
udp 18
0x0000 4500 002e 41cf 0000 7311 04cc d317 8fcd E...A...s.......
0x0010 d9eb c453 0a4d 0d09 001a 9731 e39a 87b2 ...S.M.....1....
0x0020 aa35 0fb0 cfd3 76aa 8aed 2918 3057 .5....v...).0W
19:32:51.517154 140.117.160.162.19300 > 217.235.196.83.directv-catlg: udp 18
0x0000 4500 002e 7ee6 0000 6d11 0382 8c75 a0a2 E...~...m....u..
0x0010 d9eb c453 4b64 0d09 001a c094 e39a 8109 ...SKd..........
0x0020 7066 fd53 ce3a 2882 66ce bd5e 2e18 pf.S.:(.f..^..
.....

Reply With Quote
  #2 (permalink)  
Old 01-19-2004
Jem Berkes
 
Posts: n/a
Default Re: udp port 3337

> When I go online with my new ADSL internet link, it often happens that
> my iptables firewall blocks about 2 kilobytes/sec of incoming traffic
> on udp port 3337 named "Direct TV Data Catalog". Can anybody tell me
> what service and software this might be? Since this is a lot of
> bandwidth I usually disconnect and reconnect with a different address.
>
> The packages look like this:
>
> 19:32:50.808401 211.23.143.205.imdocsvc >
> 217.235.196.83.directv-catlg: udp 18


2 KBytes/sec is significant traffic. The IP address you showed,
211.23.143.205 is located in Taiwan

Is your firewall configured to DROP or REJECT the packet? You should try
REJECT since this will give the peer more feedback, and perhaps it will
stop trying to send you data.

--
Jem Berkes
http://www.sysdesign.ca/
Reply With Quote
  #3 (permalink)  
Old 01-20-2004
Michael Mueller
 
Posts: n/a
Default Re: udp port 3337


Jem Berkes wrote:
>>When I go online with my new ADSL internet link, it often happens that
>>my iptables firewall blocks about 2 kilobytes/sec of incoming traffic
>>on udp port 3337 named "Direct TV Data Catalog". Can anybody tell me
>>what service and software this might be? Since this is a lot of
>>bandwidth I usually disconnect and reconnect with a different address.
>>
>>The packages look like this:
>>
>>19:32:50.808401 211.23.143.205.imdocsvc >
>>217.235.196.83.directv-catlg: udp 18

>
>
> 2 KBytes/sec is significant traffic. The IP address you showed,
> 211.23.143.205 is located in Taiwan
>
> Is your firewall configured to DROP or REJECT the packet? You should try
> REJECT since this will give the peer more feedback, and perhaps it will
> stop trying to send you data.
>


I tried both DROP and REJECT. It made no difference.

Reply With Quote
  #4 (permalink)  
Old 01-20-2004
Michael Mueller
 
Posts: n/a
Default Re: udp port 3337


Jem Berkes wrote:
>>When I go online with my new ADSL internet link, it often happens that
>>my iptables firewall blocks about 2 kilobytes/sec of incoming traffic
>>on udp port 3337 named "Direct TV Data Catalog". Can anybody tell me
>>what service and software this might be? Since this is a lot of
>>bandwidth I usually disconnect and reconnect with a different address.
>>
>>The packages look like this:
>>
>>19:32:50.808401 211.23.143.205.imdocsvc >
>>217.235.196.83.directv-catlg: udp 18

>
>
> 2 KBytes/sec is significant traffic. The IP address you showed,
> 211.23.143.205 is located in Taiwan
>
> Is your firewall configured to DROP or REJECT the packet? You should try
> REJECT since this will give the peer more feedback, and perhaps it will
> stop trying to send you data.
>


I tried both DROP and REJECT. It made no difference.

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 06:05 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0