Port 79 traffic all of a sudden.

[Billy746]

I have been getting this traffic appearing on my LAN recently and can't seem to locate the cause of it. Can anybody shed any light on this?

No. Time Source Destination Protocol Info
1 0.000000 xx.xx.1.62 224.0.1.20 UDP Source port: 1027 Destination port: 79
2 0.095866 xx.xx.1.47 224.0.1.20 UDP Source port: 1030 Destination port: 79
3 0.191867 xx.xx.1.23 224.0.1.20 UDP Source port: 1034 Destination port: 79
4 0.287801 xx.xx.1.62 224.0.1.20 UDP Source port: 1027 Destination port: 79
10 2.206639 xx.xx.1.94 224.0.1.20 UDP Source port: 2308 Destination port: 79
13 2.750299 xx.xx.1.73 224.0.1.20 UDP Source port: 1029 Destination port: 79
14 2.910211 xx.xx.1.227 224.0.1.20 UDP Source port: 1030 Destination port: 79
18 3.517829 xx.xx.1.118 224.0.1.20 UDP Source port: 1031 Destination port: 79
23 4.381328 xx.xx.1.251 224.0.1.20 UDP Source port: 1026 Destination port: 79
25 4.733093 xx.xx.1.250 224.0.1.20 UDP Source port: 1027 Destination port: 79
39 8.538785 xx.xx.1.136 224.0.1.20 UDP Source port: 1029 Destination port: 79
50 10.329689 xx.xx.1.231 224.0.1.20 UDP Source port: 1029 Destination port: 79
51 10.489598 xx.xx.1.210 224.0.1.20 UDP Source port: 1030 Destination port: 79
53 11.062185 xx.xx.1.163 224.0.1.20 UDP Source port: 1031 Destination port: 79
58 11.904214 xx.xx.1.249 224.0.1.20 UDP Source port: 1031 Destination port: 79
59 11.992610 xx.xx.1.195 224.0.1.20 UDP Source port: 1031 Destination port: 79

 

[GlenJohnson]

Read the following link.
Turn It Off NOW!

Click here to learn How to help with tsunami relief...

http://www.google.com/tsunami_relief.html

Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin feel free to join the Tek-Tips in Chicago, Illinois Forum.
Don't forget to shop @ theTek-Tips Store

 

[Auger282]

could be trojans.. 2 that use port 79 are

CDK
Firehotcker