Re: SNMP Weirdness

From: Carlo Ottaviani (ottaviani@ism.cnr.it)
Date: 01/27/03

  • Next message: Gianni Tedesco: "wierd: udp port 0 traffic" 
    Date: Mon, 27 Jan 2003 13:50:36 +0100
To: Christian Vogel <chris@obelix.hedonism.cx>
From: Carlo Ottaviani <ottaviani@ism.cnr.it>

    >Hi,
    >
    >
    >> I have a few internal machines sending the same queries to the same address.
    >
    >192.0.0.192 is the default address of HP "JetDirect" printerservers,
    >so this most likely is some windows-PC trying to discover the printservers
    >on the connected LAN.

    I agree, I saw this in my LAN a loto of times, and finally I could
    reproduce it using the HP installation software with the option of
    discovering the printers on the network.
    Bye
           Carlo

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com