[nsp-sec] Anyone else seeing a HUGE increase in TCP/1935 from Limelight Networks

[Jose Nazario]

On Mon, 16 Jun 2008, John Fraizer wrote:

> I'm not sure what this is but, it is consistently sourcing from TCP/1935 
> with large flows.  Looking at a single target host on my network, I see 
> the following in a sample window:

adabe flash communication server ? "By default, the Macromedia Flash 
Communication Server MX uses port 1935 for the RTMP (Real-Time Messaging 
Protocol). "

http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_16499

makes sense from LLN as it's a CDN ...

-------------------------------------------------------------
jose nazario, ph.d.     <jose at arbor.net>
security researcher, office of the CTO,  arbor networks
v: (734) 821 1427 	      http://asert.arbornetworks.com/