It has something to do with the XP plug n play service. Here is some
information on it and a link to disable it on XP machines. Even after
disabling it this site still says.

"UnPnP says that UPnP is safely disabled, but my system's personal
firewall keeps reporting UPnP traffic on port 1900.
UnPlug and Pray shuts down the UPnP server services, but it does not
prevent Windows or its programs from acting as UPnP clients. Client
programs like Windows itself, and later versions of Windows Messenger,
periodically search the local network for a UPnP router to control. This
network noise is annoying, but it does not mean that Windows' UPnP
server is still active and insecure."

http://grc.com/unpnp/unpnp.htm


Jared Corless
SBR Technologies

-----Original Message-----
From: Cox, Danny H. [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, September 25, 2002 4:10 PM
To: [EMAIL PROTECTED]
Cc: IT
Subject: [gb-users] odd traffic...


I've been noticing a large amount of this garbage on my net - all from
an XP system.

 

Anyone know what XP would be using port 1900 for?

 

FILTER: RAF (default) block - warning UDP
[xxx.xxx.xxx.xxx/1057]->[2xx.xxx.xxx.xxx/1900] xl1 l=132

 

FYI: the source IP address is a PRO net address (XP workstation),
destination address is Firewall (PRO network) NIC address. 

 

Very odd.

 

Danny

 



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
To subscribe to the digest version first unsubscribe, then
 e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archive of the last 1000 messages:
 http://www.mail-archive.com/[email protected]

Reply via email to