Hi,

doing a quick search of port numbers and found that port 1900 is used 
for Universal Plug and Play SSDP (Simple Service Discovery Protocol).  
Perhaps there is an IPP printer set to use SSDP on your network?

I also found reference to the game Descent 3.

I liked this comment about SSDP:
"UPnP/SSDP is the technology that, in years to come, will allow our 
refrigerators and can openers to send e-mail to our automobiles and 
softball mits."

As for trying to attach to the Gnatbox on this port- perhaps someone is 
playing Descent3 through your firewall?

hope that helps a little,

adrian


On 4 Dec 2001 at 13:35, Dean Michael Dorman wrote:

> --------------------- Attention -----------------------------
> A digest version of this list is now available.
> Send email to [EMAIL PROTECTED], with the following message:
> subscribe gb-users-digest your_email_address
> Then unsubscribe from this list.
> -------------------------------------------------------------
> GNAT Box User Forum http://www.gnatbox.com/cgi-bin/Ultimate.cgi
> Send postings to: [EMAIL PROTECTED]
> Access the list archives at: http://www.gnatbox.com/gb-users/
> -------------------------------------------------------------
> Sorry for a lame question like this but I'd like to know what is
> significant about port 1900 on my gnatbox that apparently one system
> keeps trying to atteach to it.  570Labs is my gnatbox.
> I have gotten hundreds of these per day.  They stop for a while after a
> reboot but then seem to start up after the system has been up for a few
> hours.  I've stopped MS IM, ICQ, IRC, my AV software, pretty much
> everything but the alarms keep coming.   They seem to start from random
> high ports on the client machine.
> 
> ALARM NO: 1
>  DATE: Tue 2001-12-04 13:02:07
>  INTERFACE: PROTECTED (dc0)
>  INTERFACE TYPE: Protected
>  ALARM TYPE: Block
>  IP PACKET: UDP [10.0.0.3/1244]-->[10.0.0.254/1900] l=132
>  
>  [black-n-tan.dorman-home.local/1244]-->[570Labs/1900]
> 
>  DETAILED DESCRIPTION:
>  IP packet was rejected.
> 
> 
> 
> 
> ........................................................................
> ...............................
> Dean M. Dorman
> Systems Administrator
> Putnam Company / Acorn Markets
> http://www.acornmarkets.com
> PGP Key fingerprint:
> 6ABF BAF4 7784 1F54 18A6  C8A6 C788 4C14 22C2 5A75
> ........................................................................
> ................................
> ----------------------------------------------
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe gb-users your_email_address
> in the body of the message



Reply via email to