Ethereal-users: Re: [Ethereal-users] Question about protocol firstcall42

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 11 Mar 2003 17:57:34 -0800
On Tue, Mar 11, 2003 at 08:54:02PM -0500, Robert Casto wrote:
> What is very interesting though is that software is nowhere installed on
> any of our machines.

The fact that you happen to have traffic on port 2673 doesn't
necessarily mean you're running that software - the networking stack on
some machine might have just happened to pick that port number for a TCP
client's socket, for example.

TCP and UDP port numbers are *NOT* 100% reliable indicators of the
traffic using the port number, although some port numbers might be more
reliable indicators than others.