OES Servers Unicast UDP 49152-65535 Port Traffic Initiated To Windows Clients
Running a mix of OES11 and OES 2018 eDirectory servers.
We are trying to determine why we see UDP Unicast Traffic initiated from our eDirectory servers toward our Windows Clients in the range from 49152-65535. We don't see this Unicast port traffic initiated toward all of our Windows Clients. This does not seem to be related to network segments or applications.
For example with an OES11 SP4 eDirectory server that only provides NCP Data Volumes, we see this server initiate Unicast UDP port traffic to Windows Clients on ports in the 50000 - 65000 range.
I have used netstat and tcpdump trying to discover what service or function of OES would initiate Unicast Traffic as such.
Two fold question. Are there basic build OES / eDirectory server OS functions that would initiate Unicast to Windows Clients on that port range. Next how would one troubleshoot that kind of traffic initiated from the server side to determine if it is necessary for the clients or whether or not we can block it.
Hope that makes sense, appreciate the feed back