IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [udp]

UDP (User Datagram Protocol) is a simple connectionless transmission model formally defined in RFC 768.

92 questions
3
votes
1 answer

Can NATs and firewalls blacklist IPs when trying to UDP hole punch?

I am developing a P2P application that will make use of UDP hole punch to connect two peers behind NAT. When dealing with connections between a cone and a symmetric, unpredictable NATs, however, hole punching is not as trivial as it could be with…
Matteo Monti
  • 141
  • 2
3
votes
1 answer

ARP spoofing on TCP and UDP

Statement (In Interview): ARP spoofing attacks are more effective for UDP packets rather than TCP packets since TCP establishes reliable communication channels. I have opposed the statement saying that once ARP spoofing is done, then we are…
Prithvi Raj
  • 143
  • 1
  • 7
3
votes
1 answer

What is this service?

Fairly new to infosec and am going through a course on nmap. While scanning I found this and it looked interesting and was wondering if you all had any information on this? This is the port,state and service in question. 464/udp open|filtered…
shadowjax
  • 33
  • 1
  • 1
  • 3
3
votes
2 answers

How many UDP packets is too many?

My Company recently got hit by a spam email with a link that executed an .exe file. Apparently our Antivirus stopped it from executing (Symantec enterprise). I'm no security expert, but I am a computer scientist (with development being my strong…
darkmoon
  • 31
  • 3
3
votes
2 answers

Windows firewall settings to receive UDP and pings

I use a windows 10 to receive UDP packets or pings from another computer which runs Win/Mac/Linux. I default, I turn off the firewall to receive pings or packets. I prefer not to turn off the firewall but having the previous functionality. What…
Jack
  • 31
  • 1
  • 1
  • 3
3
votes
1 answer

Is it possible to scan the top X UDP ports and the top Y (X!=Y) TCP ports in Nmap using a single command?

Given X!=Y, is there any way to scan the top (--top-ports) X TCP ports and the top Y UDP ports using a simple Nmap command? The --top-ports parameter affects both the TCP and UDP scans (e.g., when -sSU is used). If exists, short/simple command is…
Gari BN
  • 485
  • 1
  • 6
  • 14
3
votes
2 answers

How realistic is it to spoof a specific UDP IP address?

Let's say that I'm a malicious user Bob and I have found a vulnerability in an application that will allow me to impersonate another user, Alice. Alice is connected to 'X' server with her IP address (1.2.3.4) and local port (1234). Through some…
Travinsky
  • 31
  • 1
  • 2
3
votes
1 answer

Does a Server connecting to port 3544 pose an increased risk

I had look at the firewall logs and i can see my production server connects to microsoft (13.92.90.48) on UDP port 3544. A quick reading suggests this is to do with Teredo tunneling (IPV6 translation tech). Unless I am mistaken this done by Windows…
Lin
  • 143
  • 1
  • 7
3
votes
3 answers

Why is UDP port scanning slower than TCP port scanning?

I can't seem to find an answer for this. Any suggestions?
ellefc
  • 499
  • 2
  • 6
  • 14
3
votes
3 answers

TCP versus UDP resilience to DDoS

I am building a service that I can implement equally well with either TCP or UDP. If I use TCP, I expose vulnerability to SYN flood and other attacks on TCP protocol. If I use UDP, it will be harder to block UDP flood upstream without also…
user1055568
  • 171
  • 1
  • 4
2
votes
2 answers

UDP sockets open on all ports

I'm on osx. netstat -an -f inet gives me a bunch (around 10) of entries like these: ... udp4 0 0 *.* *.* udp46 0 0 *.* *.* ... In my understanding, this means there are applications…
madmax1
  • 123
  • 5
2
votes
1 answer

How SSL Protects against Replay Attacks?

Reading: https://mulloverthing.com/how-does-ssl-protect-against-replay-attack/ it says: The SSL/TLS channel itself is protected against replay attacks using the MAC (Message Authentication Code), computed using the MAC secret and the sequence…
dan
  • 19
  • 1
2
votes
2 answers

Do I have to block UDP ports when I launch my own server with a public IP?

I am trying to give better security to my Raspberry sever. When I installed UFW, I allowed just port 80/tcp and my own high port for SSH communication, and by default are all others ports "deny". Then I scanned my server with nmap, and I found out…
S3jp4kCZE
  • 43
  • 5
2
votes
1 answer

Encrypting UDP? (not using DTLS)

We are exploring options on encrypting messages to 3rd party devices which operate on UDP messages. Since each vendor will need to implement the encryption-decryption process as well, we would like to re-use the existing standards as much as…
emaayan
  • 21
  • 5
2
votes
2 answers

One way protocol with encryption without tcp

I am trying to brainstorm how I might either: 1) create a protocol (although against this option) 2) use an existing protocol That does the following: 1) allows 1 way communication from 1 node to another. 2) Provides (high grade) encryption over…
Jshee
  • 121
  • 4
1
2
3 4 5 6 7