Skip to main content
All CollectionsFAQ
Discovering UDP Connections
Discovering UDP Connections
Alex Patnick avatar
Written by Alex Patnick
Updated this week

What Is UDP?

UDP is a fast but unreliable network protocol that transmits data without a SYN-ACK handshake, making it ideal for real-time applications. It is commonly used for business communication tools like MS Teams and VOIP, home applications like streaming and gaming, and essential network services like DNS and NTP.

How Does Faddom Treat UDP?

As UDP does not send the SYN-ACK response, there is no session being formed; Faddom will show both directions of the UDP connection separately. For example, all DNS requests and their replies are all on the same port, unlike most of the other protocols that have a random source port number and a fixed destination port.

In the below example, Faddom is showing both sides of the NetBios connection (port 139 UDP). As Faddom does not know which side initiated this connection, it shows two separate lines as opposed to one line with a TCP connection.

Did this answer your question?