Re: Snort-users digest, Vol 1 #3238 - 10 msgs

[<djmurd () cox net>]

With respect to your UPNP traffic - there is a service on
Windows XP (SSDP Discovery or something very close) that
will attempt to "ask the network" about configurable devices
and "attempt to configure" or "manage" devices on the network.
This is UPNP.  Security = Naught.

Suggest you have the users disable UPNP on thier XP systems.

MSFT article describing UPNP:
http://support.microsoft.com/default.aspx?scid=kb;en-us;323713

General article discussing UPNP vulnerabilities:
http://support.microsoft.com/default.aspx?scid=kb;en-us;315000

Don Murdoch, Systems Engineer



-------------------------------------------------------
This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users