[68498] in North American Network Operators' Group
Re: FW: hey had eric sent you
daemon@ATHENA.MIT.EDU (James Edwards)
Fri Mar 12 23:57:59 2004
From: James Edwards <hackerwacker@cybermesa.com>
Reply-To: hackerwacker@cybermesa.com
To: "Riley, Marty" <Marty.Riley@afnnet.com>
Cc: "nanog@merit.edu" <nanog@merit.edu>
In-Reply-To: <113CA6EF7C48F24EA0C23FA1B2132195057111@ENTEXCL01.corp.afn.net>
Date: Fri, 12 Mar 2004 21:56:59 -0700
Errors-To: owner-nanog-outgoing@merit.edu
On Fri, 2004-03-12 at 21:17, Riley, Marty wrote:
> 10:17:16.416222 IP 192.168.1.1.1900 > 239.255.255.250.1900: udp 278
>
This is UPnP discovery. Take a look here:
http://www.nthelp.com/upnpscrewup.htm
http://www.linuxsa.org.au/mailing-list/2002-11/1134.html
I see a lot of unicast UPnP traffic on my networks.
UPnP seems like a train wreck waiting to happen, to me.
It would be interesting to see what happens if one
of your users turns UPnP off on their host.
Just a shot in the dark.
--
James H. Edwards
Routing and Security
At the Santa Fe Office: Internet at Cyber Mesa
jamesh@cybermesa.com
noc@cybermesa.com
