Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Thanks for uploading the file and making sure the picture is available. The only things I can deduct are:

  1. IP address 112.11.202.22 Geo-locates to China
  2. Port 8999 might be related to Crypto, backup or quicktime (or something else completely)
  3. The packets are sent out every ~29 sec, which is kind-of odd (usually one would then see around 30 sec interval)
  4. Most UDP payload is the same in every packet, except for byte offset 4-7. These 32 bits seem to count up. As the value increases with ~29000000 between the packets, this looks like a microsecond counter.

Hope this helps a bit...