Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Rhinorhino on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

TFTP ?

Status
Not open for further replies.

teletechman

Technical User
Joined
Aug 27, 2008
Messages
1,697
Location
US
I have a system that is getting hammered from its own VM Pro with TFTP requests and I am not sure why. I have never seen this before. The VM pro is a Windows 2012R2 server with a Datel call sweet accounting program on it. This is what I am seeing constantly.

09:40:11 71887699mS TFTP: Server::RRQ(from 192.168.3.248, 65524) (loc 192.168.3.247) nasystem/hunt_info/PBG Hunt Group (Total 1)
09:40:11 71887703mS TFTP: Server::RRQ(from 192.168.3.248, 65525) (loc 192.168.3.247) nasystem/hunt_info/Enrol Hunt Grou (Total 1)
09:40:11 71887715mS TFTP: Server::RRQ(from 192.168.3.248, 65526) (loc 192.168.3.247) nasystem/hunt_info/Conf290 (Total 1)
09:40:11 71887727mS TFTP: Server::RRQ(from 192.168.3.248, 65527) (loc 192.168.3.247) nasystem/hunt_info/Entire Company (Total 1)
09:40:11 71887896mS TFTP: Server::RRQ(from 192.168.3.248, 65528) (loc 192.168.3.247) nasystem/user_list (Total 1)
09:40:11 71887916mS TFTP: Server::RRQ(from 192.168.3.248, 65529) (loc 192.168.3.247) nasystem/user_info3/218 (Total 1)
09:40:11 71887920mS TFTP: Server::RRQ(from 192.168.3.248, 65530) (loc 192.168.3.247) nasystem/user_info3/207 (Total 1)
09:40:11 71887922mS TFTP: Server::RRQ(from 192.168.3.248, 65531) (loc 192.168.3.247) nasystem/user_info3/260 (Total 1)
09:40:11 71887925mS TFTP: Server::RRQ(from 192.168.3.248, 65532) (loc 192.168.3.247) nasystem/user_info3/222 (Total 1)
09:40:11 71887929mS TFTP: Server::RRQ(from 192.168.3.248, 65533) (loc 192.168.3.247) nasystem/user_info3/223 (Total 1)
09:40:11 71887931mS TFTP: Server::RRQ(from 192.168.3.248, 65534) (loc 192.168.3.247) nasystem/user_info3/206 (Total 1)
09:40:11 71887935mS TFTP: Server::RRQ(from 192.168.3.248, 49152) (loc 192.168.3.247) nasystem/user_info3/255 (Total 1)
09:40:11 71887937mS TFTP: Server::RRQ(from 192.168.3.248, 49153) (loc 192.168.3.247) nasystem/user_info3/226 (Total 1)
09:40:11 71887941mS TFTP: Server::RRQ(from 192.168.3.248, 49154) (loc 192.168.3.247) nasystem/user_info3/254 (Total 1)
09:40:11 71887944mS TFTP: Server::RRQ(from 192.168.3.248, 49155) (loc 192.168.3.247) nasystem/user_info3/209 (Total 1)
09:40:11 71887946mS TFTP: Server::RRQ(from 192.168.3.248, 49156) (loc 192.168.3.247) nasystem/user_info3/224 (Total 1)
09:40:11 71887950mS TFTP: Server::RRQ(from 192.168.3.248, 49157) (loc 192.168.3.247) nasystem/user_info3/203 (Total 1)
09:40:11 71887952mS TFTP: Server::RRQ(from 192.168.3.248, 49158) (loc 192.168.3.247) nasystem/user_info3/219 (Total 1)
09:40:11 71887956mS TFTP: Server::RRQ(from 192.168.3.248, 49159) (loc 192.168.3.247) nasystem/user_info3/211 (Total 1)
09:40:11 71887959mS TFTP: Server::RRQ(from 192.168.3.248, 49160) (loc 192.168.3.247) nasystem/user_info3/210 (Total 1)
09:40:11 71887963mS TFTP: Server::RRQ(from 192.168.3.248, 49161) (loc 192.168.3.247) nasystem/user_info3/216 (Total 1)
09:40:11 71887969mS TFTP: Server::RRQ(from 192.168.3.248, 49162) (loc 192.168.3.247) nasystem/user_info3/212 (Total 1)
09:40:11 71887971mS TFTP: Server::RRQ(from 192.168.3.248, 49163) (loc 192.168.3.247) nasystem/user_info3/220 (Total 1)
09:40:11 71887975mS TFTP: Server::RRQ(from 192.168.3.248, 49164) (loc 192.168.3.247) nasystem/user_info3/251 (Total 1)
09:40:11 71887978mS TFTP: Server::RRQ(from 192.168.3.248, 49165) (loc 192.168.3.247) nasystem/user_info3/204 (Total 1)
09:40:11 71887981mS TFTP: Server::RRQ(from 192.168.3.248, 49166) (loc 192.168.3.247) nasystem/user_info3/214 (Total 1)
09:40:11 71887985mS TFTP: Server::RRQ(from 192.168.3.248, 49167) (loc 192.168.3.247) nasystem/user_info3/217 (Total 1)
09:40:11 71887988mS TFTP: Server::RRQ(from 192.168.3.248, 49168) (loc 192.168.3.247) nasystem/user_info3/202 (Total 1)
09:40:11 71887991mS TFTP: Server::RRQ(from 192.168.3.248, 49169) (loc 192.168.3.247) nasystem/user_info3/225 (Total 1)
09:40:11 71887995mS TFTP: Server::RRQ(from 192.168.3.248, 49170) (loc 192.168.3.247) nasystem/user_info3/265 (Total 1)
09:40:11 71887998mS TFTP: Server::RRQ(from 192.168.3.248, 49171) (loc 192.168.3.247) nasystem/user_info3/266 (Total 1)
09:40:12 71888000mS TFTP: Server::RRQ(from 192.168.3.248, 49172) (loc 192.168.3.247) nasystem/user_info3/261 (Total 1)

Thanks Mike
 
A gamble, Datel probably.

BAZINGA!

I'm not insane, my mother had me tested!
 
It want status information of the extensions but it doesn't receive it.
Firewall rule or port 69 locked down by another app (datel?)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top