UDP Ports 67 and 68

(from: http://www.linklogger.com/UDP67_68.htm)

Typically this traffic is related to normal DHCP operation and is not an attack on your network.  DHCP (Dynamic Host Configuration Protocol) is how your computer gets its unique IP address.  When a system starts up on a network it must first request an IP address (assume it is not using a static IP address), and it does this by broadcasting a request to the DHCP server:

UDP 0.0.0.0:68 -> 255.255.255.255:67

since the requesting system doesn't have an IP address (why it is asking) it uses 0.0.0.0 and since its new to the network it doesn't know where the DHCP server is, so it broadcasts the request to the entire network (255.255.255.255).  On some networks you will see these requests bounce off of your firewall (depending on your provider's network configuration and if your router/firewall logs these requests), or your firewall/router might log this traffic between it and your providers DHCP server when it is getting or renewing its WAN IP address.

The DHCP server then responds with something like:

UDP 192.168.1.1:67 -> 255.255.255.255:68

转载于:https://www.cnblogs.com/jinrize/archive/2009/10/05/1578209.html