kb.hurricane-ridge.com » networking

Bookmarks for February 5, 2009

admin — Fri, 06 Feb 2009 20:24:10 +0000

Links for February 5, 2009:

Eavesdrop your VI-Client traffic – NTPRO.NL – Mentions a new verbose logging option which enables you to intercept the soap traffic between you VI-Client and the vCenter server.
VMware KnowledgeBase Article – ESX Server host or virtual machines have intermittent or no network connectivity – "This article provides a series of steps to help verify the proper configuration of the network and correct any issues that may be causing the lack of network connectivity."

View Packets Logged by PF

admin — Mon, 29 Dec 2008 05:11:55 +0000

Use tcpdump and the pflog0 device to view packets in real time:

# tcpdump -n -e -ttt -i pflog0

To examine the log file, do the following instead:

# tcpdump -n -e -ttt -r /var/log/pflog

See PF: Logging for more information.

Port 8 UDP Broadcasts from Windows XP’s User State Migration Tool

admin — Mon, 29 Dec 2008 05:07:57 +0000

Microsoft bundles the User State Migration Tool (USMT) with Windows to facilitate moving a user’s settings from one machine to another. When the USMT is enabled, it generates a notable amount of broadcast traffic – two to three packets per second – on UDP port 8 from the new system to 255.255.255.255, port 8:

0000 ff ff ff ff ff ff 00 11 d8 08 42 cb 08 00 45 00 ........ ..B...E. 0010 00 c8 01 5f 00 00 80 11 8b 6d ac 10 01 49 ff ff ..._.... .m...I.. 0020 ff ff 00 08 00 08 00 b4 d8 09 30 00 78 00 35 00 ........ ..0.x.5. 0030 35 00 35 00 33 00 34 00 44 00 33 00 34 00 2c 00 5.5.3.4. D.3.4.,. 0040 75 00 73 00 6d 00 74 00 2d 00 76 00 32 00 40 00 u.s.m.t. -.v.2.@. 0050 30 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 0.1.2.3. 4.5.6.7.

Note the usmt-v2 in the payload of the packet above.

UDP Port 8 appears not to have been assigned by IANA: IANA Port Numbers.