We just ran into this as well, but found something slightly different. A security tool we had found that the VRA was sending UDP traffic to other VRA’s in the same subnet and another site. It always started at UDP port 44447 and incremented from there. That is exactly how tracepath works. Come to find, […]