Hi List,<br><br>Today I've noticed that my RTP traffic rise above of the normal parameters, after check the CUCM I've noticed that my CUCM tried to connect to external host via UDP port 2048 here my outputs:<br><br>
admin:utils network capture dest 172.16.54.33 <br><br>17:48:34.284360 PECMA01.galileo.ebel.27332 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.284379 PECMA01.galileo.ebel.27236 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>
17:48:34.284398 PECMA01.galileo.ebel.27222 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.294325 PECMA01.galileo.ebel.27284 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.304347 PECMA01.galileo.ebel.27364 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>
17:48:34.304366 PECMA01.galileo.ebel.27332 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.304385 PECMA01.galileo.ebel.27236 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.304403 PECMA01.galileo.ebel.27222 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>
17:48:34.314325 PECMA01.galileo.ebel.27284 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.324342 PECMA01.galileo.ebel.27364 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.324361 PECMA01.galileo.ebel.27332 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>
17:48:34.324379 PECMA01.galileo.ebel.27236 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.324397 PECMA01.galileo.ebel.27222 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.334328 PECMA01.galileo.ebel.27284 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>
17:48:34.344342 PECMA01.galileo.ebel.27364 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.344362 PECMA01.galileo.ebel.27332 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.344380 PECMA01.galileo.ebel.27236 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>
17:48:34.344398 PECMA01.galileo.ebel.27222 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.354328 PECMA01.galileo.ebel.27284 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.364347 PECMA01.galileo.ebel.27364 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>
17:48:34.364366 PECMA01.galileo.ebel.27332 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.364386 PECMA01.galileo.ebel.27236 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.364404 PECMA01.galileo.ebel.27222 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>
17:48:34.374325 PECMA01.galileo.ebel.27284 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.384345 PECMA01.galileo.ebel.27364 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.384364 PECMA01.galileo.ebel.27332 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>
17:48:34.384383 PECMA01.galileo.ebel.27236 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br>17:48:34.384400 PECMA01.galileo.ebel.27222 > 172.16.54.33.2048: udp 172 (DF) [tos 0xb8] <br><br>What traffic is that? what application generate a lot of info with port dest 2048. any ideas?<br>
<br>Rgds.<br>-- <br>Omar E.P.T<br>-----------------<br>Certified Networking Professionals make better Connections!<br>