UDP Port 69

Common Use

UDP port 69 is used for TFTP (Trival File Transfer Protocol).

Inbound Traffic

TFTP is used by a number of attacks and worms to download trojans or other components of the attack or worm.  For example MSBlast used TFTP to transfer itself onto the victim's system.

Outbound Traffic

Outbound scans, if occurring in volume should be considered an indication of a possible worm infection on the source computer and should be investigated.

Additional Information

Page last updated on February 09, 2004