Port 8 UDP Broadcasts from Windows XP’s User State Migration Tool

admin — Mon, 29 Dec 2008 05:07:57 +0000

Microsoft bundles the User State Migration Tool (USMT) with Windows to facilitate moving a user’s settings from one machine to another. When the USMT is enabled, it generates a notable amount of broadcast traffic – two to three packets per second – on UDP port 8 from the new system to 255.255.255.255, port 8:

0000 ff ff ff ff ff ff 00 11 d8 08 42 cb 08 00 45 00 ........ ..B...E. 0010 00 c8 01 5f 00 00 80 11 8b 6d ac 10 01 49 ff ff ..._.... .m...I.. 0020 ff ff 00 08 00 08 00 b4 d8 09 30 00 78 00 35 00 ........ ..0.x.5. 0030 35 00 35 00 33 00 34 00 44 00 33 00 34 00 2c 00 5.5.3.4. D.3.4.,. 0040 75 00 73 00 6d 00 74 00 2d 00 76 00 32 00 40 00 u.s.m.t. -.v.2.@. 0050 30 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 0.1.2.3. 4.5.6.7.

Note the usmt-v2 in the payload of the packet above.

UDP Port 8 appears not to have been assigned by IANA: IANA Port Numbers.

kb.hurricane-ridge.com » Windows XP

Port 8 UDP Broadcasts from Windows XP’s User State Migration Tool