Wireshark · Ethereal-users: [Ethereal-users] What activities are these?

[suki1207@xxxxxxxxxx]

Hi, I'm still new in intepreting packet/protocol activities.  I found many 
packets with UDP port 7538.  Can someone please tell me what activities are 
these? Thank.
=============================================================================

No.     Time        Source                Destination           Protocol Info
    279 0.073484    218.106.168.34        192.168.23.76         UDP      
Source port: 12874  Destination port: 7538

Frame 279 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Oct  4, 2005 02:56:37.931607999
    Time delta from previous packet: 0.073484000 seconds
    Time since reference or first frame: 0.073484000 seconds
    Frame Number: 279
    Packet Length: 166 bytes
    Capture Length: 166 bytes
    Protocols in frame: eth:ip:udp:data
Ethernet II, Src: 172.23.1.3 (00:0d:bd:1d:49:25), Dst: 172.23.1.1 
(00:30:6d:b3:fc:16)
    Destination: 172.23.1.1 (00:30:6d:b3:fc:16)
    Source: 172.23.1.3 (00:0d:bd:1d:49:25)
    Type: IP (0x0800)
Internet Protocol, Src: 218.106.168.34 (218.106.168.34), Dst: 192.168.23.76 
(192.168.23.76)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x8e0c (36364)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 108
    Protocol: UDP (0x11)
    Header checksum: 0x65c7 [correct]
        Good: True
        Bad : False
    Source: 218.106.168.34 (218.106.168.34)
    Destination: 192.168.23.76 (192.168.23.76)
User Datagram Protocol, Src Port: 12874 (12874), Dst Port: 7538 (7538)
    Source port: 12874 (12874)
    Destination port: 7538 (7538)
    Length: 132
    Checksum: 0x5d11 [correct]
Data (124 bytes)

0000  00 00 08 27 37 50 29 52 7a 72 72 88 77 92 33 c4   ...'7P)Rzrr.w.3.
0010  00 00 00 00 00 03 00 00 00 50 ad b6 00 00 00 50   .........P.....P
0020  ed c3 00 00 00 51 05 c3 00 00 00 09 00 00 00 50   .....Q.........P
0030  b1 b6 18 00 00 00 00 50 d5 b6 04 00 00 00 00 51   .......P.......Q
0040  19 c3 04 00 00 00 00 51 32 c6 08 00 00 00 00 51   .......Q2......Q
0050  4a c6 14 00 00 00 00 51 63 19 04 00 00 00 00 51   J......Qc......Q
0060  93 19 0c 00 00 00 00 51 a3 26 34 00 00 00 00 51   .......Q.&4....Q
0070  df 85 00 00 00 00 00 02 39 cb 00 00               ........9...

-----------------------------------------------------------------------------
No.     Time        Source                Destination           Protocol Info
    387 0.097671    192.168.23.76         218.106.168.34        UDP      
Source port: 7538  Destination port: 12874

Frame 387 (1126 bytes on wire, 1126 bytes captured)
    Arrival Time: Oct  4, 2005 02:56:37.955795000
    Time delta from previous packet: 0.024187001 seconds
    Time since reference or first frame: 0.097671001 seconds
    Frame Number: 387
    Packet Length: 1126 bytes
    Capture Length: 1126 bytes
    Protocols in frame: eth:ip:udp:data
Ethernet II, Src: 172.23.1.1 (00:30:6d:b3:fc:16), Dst: 172.23.1.3 
(00:0d:bd:1d:49:25)
    Destination: 172.23.1.3 (00:0d:bd:1d:49:25)
    Source: 172.23.1.1 (00:30:6d:b3:fc:16)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.23.76 (192.168.23.76), Dst: 218.106.168.34 
(218.106.168.34)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1112
    Identification: 0x5104 (20740)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 126
    Protocol: UDP (0x11)
    Header checksum: 0x8d0f [correct]
        Good: True
        Bad : False
    Source: 192.168.23.76 (192.168.23.76)
    Destination: 218.106.168.34 (218.106.168.34)
User Datagram Protocol, Src Port: 7538 (7538), Dst Port: 12874 (12874)
    Source port: 7538 (7538)
    Destination port: 12874 (12874)
    Length: 1092
    Checksum: 0x274e [correct]
Data (1084 bytes)

0000  00 00 08 27 37 50 29 52 63 38 18 9d 06 92 5b b6   ...'7P)Rc8....[.
0010  00 00 00 00 00 00 00 03 00 00 00 50 ad b6 00 00   ...........P....
0020  00 50 ed c3 00 00 00 51 05 c3 00 01 00 00 00 00   .P.....Q........
0030  5d 33 00 00 00 00 00 50 b5 b6 04 00 ff 4c 12 91   ]3.....P.....L..
0040  94 80 32 1a cf fd c1 6f d7 ef 01 e7 2e 9f 1e 47   ..2....o.......G
0050  2f 90 83 16 34 03 e2 cc ab d9 b4 29 4c ef ce ff   /...4......)L...
0060  5d aa 80 5d f1 dd 20 6f f6 17 3b 2d f1 2e f9 cc   ]..].. o..;-....
0070  e6 77 3b 8d eb 83 1c 70 9a 8c 1f 23 92 1c c9 90   .w;....p...#....
0080  e4 83 3e db c7 2a af 2c 41 85 e6 43 77 3c e6 cc   ..>..*.,A..Cw<..
0090  8d 6a 1c 69 8f 50 2b f9 3f af e6 4b b2 6a 2a 33   .j.i.P+.?..K.j*3
00a0  56 a1 e5 7e 92 76 84 e7 c5 a5 a7 b4 83 5e 14 b3   V..~.v.......^..
00b0  a7 e7 fc 81 4f 1c 80 ab 7b 57 df 8f a4 87 f6 d4   ....O...{W......
00c0  c8 01 5e 7b cf 7d a6 33 61 ef 5a 6d 5e a3 97 f1   ..^{.}.3a.Zm^...
00d0  ab ec 1e a5 8a 10 8d 1b 00 d1 14 80 a7 ff 08 06   ................
00e0  71 19 7f a2 55 fe 51 d2 fb f7 9e 7f 1e 7b e1 d8   q...U.Q......{..
00f0  bd 8d 05 b0 5b 16 2c 0e 21 f5 e9 1a 69 bb bb ab   ....[.,.!...i...
0100  fe c6 00 12 43 b0 ba a7 bd 63 f6 df 2d de db cf   ....C....c..-...
0110  7f 12 71 3c e2 73 c8 47 10 e2 16 06 ae ba da f5   ..q<.s.G........
0120  50 86 be 8f d2 d5 e5 f5 80 72 37 11 38 68 0a ff   P........r7.8h..
0130  d1 82 a1 b4 ab 72 39 9f 1b 09 47 88 cf 9d c4 4b   .....r9...G....K
0140  ac f1 13 a0 62 d7 77 76 d8 b6 fc c7 e0 ee bd 19   ....b.wv........
0150  ad ed 65 5b 0a 3d 98 4f b5 67 6e 3c 7f f8 da df   ..e[.=.O.gn<....
0160  6a 79 5c fa b9 7b ac f7 14 81 ae a9 3d e0 ff 5f   jy\..{......=.._
0170  6c 97 f1 e7 be 10 ed 63 3d ab af d3 b7 8d 39 38   l......c=.....98
0180  b6 88 8a 55 2a 3e 16 8e 9f bc 1f 9c fc 7c fc 57   ...U*>.......|.W
0190  bf eb 93 93 fa 35 f0 7e 7c b8 3b 25 de fc fe b0   .....5.~|.;%....
01a0  7b b7 5b 27 de 76 2e dd 9a 59 df ed 15 db 50 00   {.['.v...Y....P.
01b0  17 0c 32 40 73 73 eb ef e4 a3 57 b7 ae 71 a4 2c   ..2@ss....W..q.,
01c0  ab 6d dc 21 a6 42 80 b6 97 ff fd 11 5f 2e 24 90   .m.!.B......_.$.
01d0  34 28 00 82 c8 e1 d2 6b 60 53 61 c0 b4 49 8d 21   4(.....k`Sa..I.!
01e0  8d 9e ab 42 86 df cc ca 91 e1 82 76 4e c5 84 d7   ...B.......vN...
01f0  27 44 a6 13 e4 a9 cf cf 97 a8 04 a4 00 21 28 60   'D...........!(`
0200  c8 01 5b bf 98 d7 6b 00 18 42 22 29 fb 23 d9 75   ..[...k..B").#.u
0210  95 01 56 6b 35 16 69 ff e6 59 11 bb 98 39 ae e2   ..Vk5.i..Y...9..
0220  0f 86 20 aa f2 cf 88 e1 d3 7b ee 44 60 85 c4 c5   .. ......{.D`...
0230  af c7 21 c5 82 c7 0c da 00 00 02 6e 00 01 00 28   ..!........n...(
0240  b8 52 00 00 05 09 70 fc 69 6e 95 53 26 14 b0 f3   .R....p.in.S&...
0250  d2 d8 54 6e 4a b5 8b ff c8 88 d3 a9 c7 be 8d 26   ..TnJ..........&
0260  0a 95 c6 e8 08 74 ac 80 4e f3 45 4d ff 8c cf 61   .....t..N.EM...a
0270  62 80 01 05 aa 87 bd 7e 4f 76 e1 43 11 86 23 e4   b......~Ov.C..#.
0280  b7 1d b7 86 22 15 a6 76 0c 01 57 30 fd 4c aa e3   ...."..v..W0.L..
0290  f5 69 c8 67 54 7f da 09 e6 b7 74 75 5a 02 a5 17   .i.gT.....tuZ...
02a0  fb ae 90 b1 60 c8 1d 56 d7 94 94 84 0e 52 56 98   ....`..V.....RV.
02b0  c4 28 cc 30 21 af 24 6c 58 4e 84 30 77 3a 7b bb   .(.0!.$lXN.0w:{.
02c0  85 b2 73 0c 44 b2 20 59 2c 10 ef 39 cb a9 23 84   ..s.D. Y,..9..#.
02d0  6f 36 30 de 15 25 86 72 0c e8 07 bb b2 7a 29 ec   o60..%.r.....z).
02e0  af 9d ef 66 4c 5b d5 78 4b 0e 11 00 45 e5 a0 8a   ...fL[.xK...E...
02f0  1e 05 bd c9 83 0c 82 21 08 c1 ac 16 26 f7 86 4f   .......!....&..O
0300  a4 9d f4 74 87 b5 66 b6 b8 b0 ca 4d e4 45 d3 64   ...t..f....M.E.d
0310  8e 09 51 29 89 a5 27 0d 0e ac 84 f6 30 2d 42 42   ..Q)..'.....0-BB
0320  11 c6 0e 07 e9 a6 de da 47 17 a0 68 46 84 37 4b   ........G..hF.7K
0330  ab 47 b2 eb dd 09 8d 89 4c 70 3b 95 f1 0b ff f3   .G......Lp;.....
0340  50 91 a0 2a db 4f ed 87 01 2c a6 d3 ef ba 1d dd   P..*.O...,......
0350  f1 f8 c4 3a 57 96 da 75 93 96 8f 7f f2 6a a5 01   ...:W..u.....j..
0360  26 75 5b 44 db c9 f4 02 c5 23 21 24 a5 e6 09 9d   &u[D.....#!$....
0370  36 e2 c3 65 b0 eb a6 10 42 06 3a 4a 1a 4a d6 b5   6..e....B.:J.J..
0380  33 28 71 94 ff c3 3f 7e 58 b0 82 13 21 00 a8 51   3(q...?~X...!..Q
0390  f1 df e6 28 93 03 07 1b e2 2c 79 88 c3 87 0e 18   ...(.....,y.....
03a0  c3 1e 32 53 36 b4 ce ce 64 00 ad 6b 5a a2 a5 50   ..2S6...d..kZ..P
03b0  5f ff de 30 01 36 48 69 a2 eb ad 47 4b fe 35 e9   _..0.6Hi...GK.5.
03c0  f6 71 7f fd c2 a1 86 1c 52 bc b6 c4 14 80 16 2d   .q......R......-
03d0  59 4e b8 65 ff fd 6e 5d 13 69 6b dd 43 c0 d8 1f   YN.e..n].ik.C...
03e0  07 f3 4e 92 58 03 2b f7 8e 60 39 7c e5 27 93 d3   ..N.X.+..`9|.'..
03f0  5e e9 e4 73 2d 01 02 f4 3c bc 10 50 09 02 a7 0e   ^..s-...<..P....
0400  75 73 5f 5e 69 b6 05 00 06 bc d3 7c cb 39 66 0f   us_^i......|.9f.
0410  21 e6 c3 69 63 19 a0 84 00 1f 91 9f ef a0 44 1d   !..ic.........D.
0420  4f 3a 78 33 b8 b4 f7 22 22 cb 16 bc 38 b5 b6 51   O:x3...""...8..Q
0430  ec 3f f1 7b 4d 13 32 88 88 88 0d 1c               .?.{M.2.....

----------------------------------------------------------------------------
No.     Time        Source                Destination           Protocol Info
    450 0.112022    192.168.23.76         218.106.168.34        UDP      
Source port: 7538  Destination port: 12874

Frame 450 (1108 bytes on wire, 1108 bytes captured)
    Arrival Time: Oct  4, 2005 02:56:37.970145999
    Time delta from previous packet: 0.014350999 seconds
    Time since reference or first frame: 0.112022000 seconds
    Frame Number: 450
    Packet Length: 1108 bytes
    Capture Length: 1108 bytes
    Protocols in frame: eth:ip:udp:data
Ethernet II, Src: 172.23.1.1 (00:30:6d:b3:fc:16), Dst: 172.23.1.3 
(00:0d:bd:1d:49:25)
    Destination: 172.23.1.3 (00:0d:bd:1d:49:25)
    Source: 172.23.1.1 (00:30:6d:b3:fc:16)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.23.76 (192.168.23.76), Dst: 218.106.168.34 
(218.106.168.34)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1094
    Identification: 0x5105 (20741)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 126
    Protocol: UDP (0x11)
    Header checksum: 0x8d20 [correct]
        Good: True
        Bad : False
    Source: 192.168.23.76 (192.168.23.76)
    Destination: 218.106.168.34 (218.106.168.34)
User Datagram Protocol, Src Port: 7538 (7538), Dst Port: 12874 (12874)
    Source port: 7538 (7538)
    Destination port: 12874 (12874)
    Length: 1074
    Checksum: 0x7738 [correct]
Data (1066 bytes)

0000  00 00 08 27 37 50 29 52 63 38 18 9d 06 92 5b b6   ...'7P)Rc8....[.
0010  00 00 00 00 00 00 00 00 00 01 00 00 00 00 5d 33   ..............]3
0020  00 00 00 00 00 50 b9 b6 04 00 88 29 c6 2c d4 70   .....P.....).,.p
0030  e6 7d 77 7b e7 38 7f 61 a5 d9 d9 de 41 e4 5d 6a   .}w{.8.a....A.]j
0040  08 3d 7b 00 9d af dd 97 12 f4 97 fa 23 3c 0f 65   .={.........#<.e
0050  aa b1 84 76 a1 a0 63 6f 48 3e d8 a4 01 8b 10 64   ...v..coH>.....d
0060  00 35 a9 43 3a 90 d1 c1 3b 46 c4 a5 11 69 3d eb   .5.C:...;F...i=.
0070  3e 63 8a af de 68 e1 7b 7b 44 4a 88 8e cc 83 0c   >c...h.{{DJ.....
0080  45 28 e6 fd 13 d9 f9 2b 64 30 a2 b5 7b a5 03 18   E(.....+d0..{...
0090  69 f6 9b 81 00 00 05 46 00 01 00 28 b8 52 00 00   i......F...(.R..
00a0  05 0a 70 fc 6b c9 95 d3 26 14 b0 4d 25 ba 42 b4   ..p.k...&..M%.B.
00b0  cc ac e1 f6 e7 df 8b 17 e3 02 30 9d 37 62 bd de   ..........0.7b..
00c0  24 ed c9 a8 9f ca 88 45 6e 30 8f 55 ed 61 06 22   $......En0.U.a."
00d0  4c a8 20 31 84 53 04 42 c3 ca ce 8d 13 97 8e d3   L. 1.S.B........
00e0  9f a4 12 32 f2 b8 f2 9d ad 27 48 02 0a cd 2c c1   ...2.....'H...,.
00f0  a1 c6 50 2f 67 90 a4 00 a7 a5 09 6f 02 cb ab 12   ..P/g......o....
0100  6f ee 76 85 e9 12 86 77 c3 b6 65 07 e8 2c 7b 20   o.v....w..e..,{ 
0110  57 eb be ba d8 14 d9 c0 78 7d b8 f6 b9 d6 e6 e5   W.......x}......
0120  65 2d d2 65 9a 3a 54 8a 07 a2 ff 4d 5b 6e 6e 67   e-.e.:T....M[nng
0130  2c 02 aa 45 23 c0 27 dd e0 0c a1 72 28 f6 9f 05   ,..E#.'....r(...
0140  49 12 5d b4 9e 89 e2 ca 79 72 21 f0 fe 51 3b 34   I.].....yr!..Q;4
0150  9e 1b 02 10 e9 42 42 90 28 8c 30 62 b9 17 59 6c   .....BB.(.0b..Yl
0160  b7 c8 89 e1 ff fc 38 79 49 64 55 a8 1e 80 67 2f   ......8yIdU...g/
0170  0e f1 bd 3e 80 f8 54 b4 5f 02 d9 93 9a 04 5e 08   ...>..T._.....^.
0180  0b 6c 7d b9 91 c9 2b 48 08 12 8d 9f 0c c2 e4 fe   .l}...+H........
0190  52 be cc e9 24 ca 0d 9a 28 5d a1 97 e4 87 17 08   R...$...(]......
01a0  7d ea 04 71 92 0e d1 c6 dd 4c 85 73 a3 fa 48 a3   }..q.....L.s..H.
01b0  7e 72 1c 33 13 b2 0d c9 fd bf 76 5d 49 d4 09 b7   ~r.3......v]I...
01c0  8c b3 4f b4 5e b6 5a 7e 0d c3 f5 c8 43 b2 fe 88   ..O.^.Z~....C...
01d0  fa 5e ed 8c e3 f9 fa 3d 2b 52 1a 51 5b 60 ac c9   .^.....=+R.Q[`..
01e0  dd 57 5d e1 28 64 fb 4b 94 8e ec 26 44 a9 05 d8   .W].(d.K...&D...
01f0  f6 d3 49 cc d3 4f db 9f 94 ff 76 52 3d fc b0 72   ..I..O....vR=..r
0200  06 41 21 8d 32 7b 4b 86 de 65 d0 c3 69 9f c6 0b   .A!.2{K..e..i...
0210  dd a7 b3 9b 49 36 08 a3 7c a4 b2 a2 43 90 0f 45   ....I6..|...C..E
0220  96 a6 d8 f8 e8 ea ad 2f c9 a3 69 13 d7 f7 2a 74   ......./..i...*t
0230  04 e2 cb cf 75 ae 84 17 aa 38 2d 77 ae 71 28 26   ....u....8-w.q(&
0240  bd e6 f4 02 db 0d 5d 00 93 e0 78 39 c5 ef 8c c5   ......]...x9....
0250  e1 82 33 38 66 9a 15 2a 72 f0 f5 a1 15 a0 a4 ea   ..38f..*r.......
0260  ea a5 91 b7 7a 64 e2 37 d2 82 81 18 c0 d6 85 0c   ....zd.7........
0270  10 9a ab e3 2f b1 41 30 f3 8a 9d a9 4f 8c 66 83   ..../.A0....O.f.
0280  05 55 5d 83 08 1c 77 4d 0d 5d e8 9b 54 51 af 50   .U]...wM.]..TQ.P
0290  9a 41 78 79 a1 da d9 e5 83 ea 83 a4 9a 01 c9 fa   .Axy............
02a0  8f 3c b8 29 0b 86 46 93 76 58 ec d3 14 b1 44 67   .<.)..F.vX....Dg
02b0  ca ec 05 95 a8 13 ec 29 78 32 6a 0a 9b bb a6 57   .......)x2j....W
02c0  4e 78 32 f5 b4 56 0a 37 fe 0e bf 40 30 5d d1 da   Nx2..V.7...@0]..
02d0  23 4f 90 e9 b9 63 53 9e ed 0a 0b 22 1a e9 25 97   #O...cS...."..%.
02e0  b2 22 aa 0b dd af 15 d2 36 9b fe c1 5e d6 2b e7   ."......6...^.+.
02f0  d6 57 7e 90 9b ac ad a9 1f 66 65 d8 fb ca a5 3d   .W~......fe....=
0300  be 4c ca 44 33 a2 53 6a 57 a7 45 b8 3f 62 ee 28   .L.D3.SjW.E.?b.(
0310  ad af 7c 60 81 c7 a4 df 52 94 0b 73 17 f1 ba 21   ..|`....R..s...!
0320  4c c6 75 70 8e 7a b2 5c a5 46 15 f2 56 07 e3 ec   L.up.z.\.F..V...
0330  17 43 bb 3d 6c 8f 8d 4d 56 e3 e8 f7 5c 12 55 96   .C.=l..MV...\.U.
0340  33 73 62 a4 a5 5b 9c 5f b4 8c fb 11 23 b2 13 aa   3sb..[._....#...
0350  57 72 98 9d 5a 02 32 df 82 c3 c1 63 21 f6 e1 51   Wr..Z.2....c!..Q
0360  0b 08 57 de a3 4d 6a 66 3a 15 46 b1 b7 59 5c d6   ..W..Mjf:.F..Y\.
0370  88 44 f0 fc 0f 62 d3 d6 c4 87 7a 7f a2 a8 a4 eb   .D...b....z.....
0380  56 50 00 40 f1 0a 71 90 fa 92 4a 0f d4 3b 8f 5f   VP.@..q...J..;._
0390  ef c0 57 80 4b 1e 3a 6b 3f 1f 26 52 27 bb 22 72   ..W.K.:k?.&R'."r
03a0  50 04 5e 89 34 1e 1d 4d 51 75 cb 9b 1b dd cb 29   P.^.4..MQu.....)
03b0  df 70 2e 0a d9 01 d9 ac 4a 9a a3 39 20 ec 54 a7   .p......J..9 .T.
03c0  6b 37 f2 97 70 2d d0 b5 a0 4b 76 17 e9 97 1b c9   k7..p-...Kv.....
03d0  88 b6 fe d8 76 ee 2b 0a 48 ad 64 47 bf 52 7e 84   ....v.+.H.dG.R~.
03e0  f9 c7 c3 d3 c7 a3 e8 e6 5a b2 3a ae 64 ed 4a d4   ........Z.:.d.J.
03f0  86 8a 22 b3 20 d8 94 9f fc b8 28 c1 1f 40 df e0   ..". .....(..@..
0400  e4 4e 59 62 8c 1e da 0b 4f 8b 84 67 de 8d a5 ae   .NYb....O..g....
0410  17 83 e7 91 69 40 15 5b 90 11 1c a7 45 30 4b 59   ....i@.[....E0KY
0420  61 64 cb d1 a8 59 7d 7d 53 8f                     ad...Y}}S.