What's this 135/UDP traffic?

[Joachim Feise]

According to http://www.iana.org/assignments/port-numbers, port 135 is
epmap           135/tcp    DCE endpoint resolution
epmap           135/udp    DCE endpoint resolution

And usually even M$ is honoring this list.
Now I only have a general idea about DCE, but I think it has been somewhat
integrated into LDAP. So I guess MS tries to find Visio using DCE and LDAP,
based on the .vsd extension of the file you mention.
This is just a guess, though.

-Joe

On Fri, 21 Dec 2001, Pierre Belanger wrote:

> Hello Joel,
> 
> Port 135 is something new to me but NT is a couple of years
> old... my Samba is also not listening on port 135 UDP or TCP.
> 
> Following is the first UDP packet transmitted from the NT workstation
> to the Samba server. As you can see, the client is sending a
> "file path" \\alkonost\docums\Structure.vsd . This "Structure.vsd"
> file is a link within the original opened document, which is another
> document... (Document.doc has an "internal link" pointing to
> "Structure.vsd").