We have an application for network traffic monitoring and are trying to figure out what traffic should be allowed or blocked. One of the entries is desktops talking to other desktops on the network via port 5355 and it is mapped to Dnscache service.

Should this traffic be allowed between workstations on the same network and what would happen if we blocked it?

1

1 Answer

The port is used by Link-Local Multicast Name Resolution protocol within the Dnscache Service. This is a necessary service so that the PC's can resolve each other's names on a subnet when there is no DNS server or when the DNS server is not providing Name Resolution. Based on the article below this is used only when all other attempts to resolve names fail, it would be a bad idea to block it on your network.

Here is a reference link to the subject:

1

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password Submit

Post as a guest

Post Your Answer Discard

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy