rtcp traffic ????

[Russell Fulton]

Recently I have started seeing our DNS traffic being tagged as rtcp in
argus:

2005-03-10-06:22:47 rtcp     130.216.1.1:32772   <->  217.195.34.120:53     CON
2005-03-10-06:24:42 rtcp     130.216.1.1:32772   <->   216.130.161.1:53     CON
2005-03-10-06:28:59 rtcp     130.216.1.1:32772   <->    62.93.212.70:53     CON
2005-03-10-06:32:44 rtcp     130.216.1.1:32772   <->   205.200.16.65:53     CON
2005-03-10-06:35:38 rtcp     130.216.1.1:32772   <->    192.42.93.33:53     CON
2005-03-10-06:37:53 rtcp     130.216.1.1:32772   <->    128.91.254.4:53     CON
2005-03-10-06:37:56 rtcp     130.216.1.1:32772   <->      66.82.4.12:53     CON
2005-03-10-06:39:21 rtcp     130.216.1.1:32772   <->  213.19.161.190:53     CON
2005-03-10-06:40:29 rtcp     130.216.1.1:32772   <->   192.58.150.21:53     CON
2005-03-10-06:42:23 rtcp     130.216.1.1:32772   <->  63.160.254.211:53     CON
2005-03-10-06:49:32 rtcp     130.216.1.1:32772   <->     24.232.0.17:53     CON
2005-03-10-06:52:06 rtcp     130.216.1.1:32772   <->    65.221.0.198:53     CON
2005-03-10-06:54:05 rtcp     130.216.1.1:32772   <->  198.116.144.33:53     CON
2005-03-10-06:55:49 rtcp     130.216.1.1:32772    ->     202.2.59.39:53     INT

The person who supports our BIND implementation is on leave (as is the
other person who might know).  From what I can fathom from google rtcp
is a real time protocol related to streaming media ???

Any idea what is going on here?

Russell
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2201 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20050314/1b90b863/attachment.bin>