comp.security.firewalls archive
Re: peculiar traffic trying to come in.
Date: Thu Feb 02 2006 - 13:34:05 CET
On Thu, 02 Feb 2006 10:26:11 GMT, "BernieM" <me@theseaside.com> wrote:
>
>"BOUTM13" <et57@hotmail.com> wrote in message
>news:dml3u1pmj2bh0n7encdbsc78h7tnchftdf@4ax.com...
>> My Sygate FW log tells me, My USRobotics modem/router (model 029106)
>> is trying to send me UDP packets from and to port 1900.
>> However, the destination IP(239.255.255.250) is NOT my IP address (in
>> 192.168. range, on which I log) , and the destination MAC is also
>> unknown on mij intranet.
>>
>> The traffic occurs on a fixed frequency, once in about 25 seconds.
>> The log shows it has already occured 700 times, since last log reset.
>>
>> What is this all about ?
>>
>> Erik
>
>http://lists.sans.org/pipermail/list/2003-June/008632.html
>
high grade help.
In the USRobotics, there is a setting for uPnP.
I unselected it and the traffic is gone.
thnx
Erik
Received on Tue Feb 7 20:58:51 2006