TGP ??

mattsthe2

Im montiroing whats going over my routers interface outbound and inbound and im noticing that there is alot of traffic for TGP (1223) UDP.

Google doesnt yield anything, what is TGP?

ITdude

Port 1223 TGP (Truly Global Protocol)

Ahriakin

With generic sound protocols I sometimes have more luck doing a DNS lookup on the external IP for some hints as to what it might be. If it's a generic ISP's DHCP client then I'm more likely to turn it off an wait to see who comes asking about it. If not then the name may help, e.g. had a wierd 8000 range port the other day but the target resolved to a shoutcast server so I had a word with the user about their audio streaming habits.

mattsthe2

Ahriakin wrote:

With generic sound protocols I sometimes have more luck doing a DNS lookup on the external IP for some hints as to what it might be. If it's a generic ISP's DHCP client then I'm more likely to turn it off an wait to see who comes asking about it. If not then the name may help, e.g. had a wierd 8000 range port the other day but the target resolved to a shoutcast server so I had a word with the user about their audio streaming habits.

Im using SolarWinds Engineers Toolkit to reivew this stuff...how do you do it?

Ahriakin

Adventnet Firewall Analyzer for all internet traffic (Over the PIX/ASAs). Hopefully in the next few months we'll be adding their Netflow Analyzer to get traffic info. from the site routers aswell.