Sample trace:
IP w.x.y.z.2000 > 255.255.255.255.47474: UDP, length yyy
Description:
This is a UDP broadcast packet that you may see on your network, every 10 minutes, from 1 or more machines. It has come to my attention that this may also be used with bittorrent, but from what I can tell it is not normal, I will look into this.
Cause:
This is caused by the Esker License Service, which broadcasts out to find all licensed copies of Esker products on the local network. This process runs every 10 minutes, while systems are running this service.
Suggestions
Well there is not much I can say about this, you can not disable the service, or the Esker products running on the system will stop working. Things which do work (but remember licenses may not allow them):
-
Filter on system's outbound traffic.
-
Filter on a L3 aware switch.
-
Switch from Esker products.
-
Live with it.
Recommendations for Esker
If you are a Network Administrator, block outbound traffic to 255.255.255.255 the world doesn't need to see this traffic.
Links
