While investigating a connection issue between two DMAs in our cluster, we observed traffic with source port 4222 using a protocol called Radio Signalling Link. Many of the packets using this protocol are malformed. I did some research on this protocol and it seems to be a protocol used in telecommunications networks between transceiver stations and station controllers. It seems odd that this traffic is being seen between two Windows server hosted DMAs on an enterprise network. We also do not see this traffic between all of our DMAs, just ones in particular security zones.
I am curious about the function of this protocol within NATS.
Hi Ryan, I am unable to find this protocol in our Catalog. Is this your own protocol ?
The best way to check this would be using Wireshark. You can easily see what frames are being sent over the port 4222 between DataMiner and the device running this protocol. Have you already tried this ?