Re: Denied UDP packet from LAN port 4654 to router 1900

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 12/04/02 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Tue, 3 Dec 2002 22:47:46 -0500

I hate that too.

Probably MSN Messenger which I think enables or uses Universal Plug and Play
to try to [I think] enumerate network devices. I believe you can disable
the SSDP and/or UPnP
service(s) and reboot, and/or there's a utility at www.grc.com to disable
UPnP, and if the packets continue after that, I think you might also need to
uninstall or disable MSN Messenger from loading automatically with Windows.
I seem to remember having to do multiple things on one XP machine to finally
stop those packets.

http://www.google.com/search?hl=en&lr=&ie=ISO-8859-1&q=udp+1900+universal
http://www.google.com/search?hl=en&ie=ISO-8859-1&q=udp+1900p://is-it-true.org/nt/xp/registry/rtips18.shtml
http://is-it-true.org/nt/xp/registry/rtips18.shtml

"Gregg" <bogus@nowhere.com> wrote in message
news:exP4cfymCHA.1624@TK2MSFTNGP10...
> Hello!
>
> I have a 3Com Office Connect firewall (same as SonicWall) that keeps
getting
> hundreds of log entries for "12/03/2002 15:37:30.064 Denied UDP packet
from
> LAN 10.0.0.124, 4654, LAN 10.0.0.1, 1900, LAN."
>
> They all come from the same Windows XP Professional computer on port 4654
> and are destined for port 1900 on 10.0.0.1, which is the firewall's IP
> address. We have several XP Pro computers, but only this one shows these
> entries. I ran FPORT and it showed the "System" process ID 0 as the only
> thing on those ports and gave no further detail (no program shows on those
> ports).
>
> Does anyone have an idea what could be causing these probes? Norton AV
> Corporate shows no virus activity.
>
> Our domain is an NT4 domain.
>
> Gregg Hill
>
>

Relevant Pages

  • Problem with MSN Messenger Audio Conversation, Video Conference, Application Sharing etc.
    ... I am using MSN Messenger Version 6.2. ... You are connected to the Internet through a UPnP port restricted NAT ... Port Forwarding: ... I enabled UPnP Forwarding because I ran out of space to enter ...
    (microsoft.public.windowsxp.messenger)
  • Re: Opne ports 1863 & 5910 - pentest
    ... Port 1863 is most commonly used for MSN Messenger and VNC ... Information Assurance Certification Review Board ...
    (Pen-Test)
  • Re: Please help...
    ... you may be able to filter via the application name. ... Otherwise Yahoo messenger normally uses 5050 TCP(peer-to-server dest. ... and 5105 TCP(peer-to-peer listening port) and MSN Messenger 1863 ...
    (comp.security.firewalls)
  • Denied UDP packet from LAN port 4654 to router 1900
    ... hundreds of log entries for "12/03/2002 15:37:30.064 Denied UDP packet from ... They all come from the same Windows XP Professional computer on port 4654 ... Our domain is an NT4 domain. ...
    (microsoft.public.windowsxp.security_admin)
  • Using firewall Win2k into NT4 Domain
    ... I am trying to add a windows 2000 server to an NT4 Domain ... can't find the Domain Controller. ... 137 to WINSand port 53 to DNS server? ...
    (microsoft.public.win2000.security)