Re: FW: hey had eric sent you

[James Edwards <hackerwacker () cybermesa com>]

On Fri, 2004-03-12 at 21:17, Riley, Marty wrote:

>  10:17:16.416222 IP 192.168.1.1.1900 > 239.255.255.250.1900: udp 278

This is UPnP discovery. Take a look here:
http://www.nthelp.com/upnpscrewup.htm
http://www.linuxsa.org.au/mailing-list/2002-11/1134.html

I see a lot of unicast UPnP traffic on my networks. 
UPnP seems like a train wreck waiting to happen, to me.

It would be interesting to see what happens if one
of your users turns UPnP off on their host.

Just a shot in the dark.

-- 
James H. Edwards
Routing and Security
At the Santa Fe Office: Internet at Cyber Mesa  
jamesh () cybermesa com
noc () cybermesa com