Hi,
I started monitoring my test network and found something interesting to me. The server that is a iSCSI initiator is broadcasting UDP packets to port 5002. I tried sniffing the production network and those iSCSI initiators are broadcasting to
UDP destination port 5002 too.
wireshark output:
source: 10.10.10.19
destination: 10.10.10.255
protocol: UDP
length: 348
source port: 55903 or 61225 but is incrementing on each server
info: destination port: 5002
data: kdrinettm.d iqn.1991-05.com.microsoft:emailhost.
The initator seems to be broadcasting every 3 seconds. The source port is incrementing by 2 every 3 minutes or so (source was 55903, 3.5 minutes later is 55905, 3.5 minutes later is 55907, etc).