rtcp traffic ????

[Peter Van Epp]

	Carter's rtp hueristic needs some more tuning? Happens to me too (I
just ignore it). Argus I think is seeing lots of udp traffic to a single port
and deciding it must be streaming. I suspect it then measures jitter more 
carefully than usual (but that could be wrong).

Peter Van Epp / Operations and Technical Support 

On Mon, Mar 14, 2005 at 08:48:32AM +1300, Russell Fulton wrote:
> Recently I have started seeing our DNS traffic being tagged as rtcp in
> argus:
> 
> 2005-03-10-06:22:47 rtcp     130.216.1.1:32772   <->  217.195.34.120:53     CON
> 2005-03-10-06:24:42 rtcp     130.216.1.1:32772   <->   216.130.161.1:53     CON
> 2005-03-10-06:28:59 rtcp     130.216.1.1:32772   <->    62.93.212.70:53     CON
> 2005-03-10-06:32:44 rtcp     130.216.1.1:32772   <->   205.200.16.65:53     CON
> 2005-03-10-06:35:38 rtcp     130.216.1.1:32772   <->    192.42.93.33:53     CON
> 2005-03-10-06:37:53 rtcp     130.216.1.1:32772   <->    128.91.254.4:53     CON
> 2005-03-10-06:37:56 rtcp     130.216.1.1:32772   <->      66.82.4.12:53     CON
> 2005-03-10-06:39:21 rtcp     130.216.1.1:32772   <->  213.19.161.190:53     CON
> 2005-03-10-06:40:29 rtcp     130.216.1.1:32772   <->   192.58.150.21:53     CON
> 2005-03-10-06:42:23 rtcp     130.216.1.1:32772   <->  63.160.254.211:53     CON
> 2005-03-10-06:49:32 rtcp     130.216.1.1:32772   <->     24.232.0.17:53     CON
> 2005-03-10-06:52:06 rtcp     130.216.1.1:32772   <->    65.221.0.198:53     CON
> 2005-03-10-06:54:05 rtcp     130.216.1.1:32772   <->  198.116.144.33:53     CON
> 2005-03-10-06:55:49 rtcp     130.216.1.1:32772    ->     202.2.59.39:53     INT
> 
> The person who supports our BIND implementation is on leave (as is the
> other person who might know).  From what I can fathom from google rtcp
> is a real time protocol related to streaming media ???
> 
> Any idea what is going on here?
> 
> Russell