Ethereal-users: RE: [Ethereal-users] SSDP / UPNP question and Win ME / XP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Erick B." <erickbe@xxxxxxxxx>
Date: Thu, 26 Sep 2002 00:12:35 -0700 (PDT)
Martin,

Thanks for the reply. I came across what I believe the
problem is. Apparently if MSN Messenger is running
even with SSDP / UPNP disabled messenger will try to
send SSDP / UPNP traffic to find services. I'm going
to check on this tomorrow. Theres a registry tweak to
turn off the SSDP / UPNP stuff that MSN uses or just
not use Messenger.

But still curious why a L3 routing switch sends
hundreds of ICMP redirects to this client after just 1
SSDP / UPNP packet. One or two would be
understandable... 

--- "Visser, Martin (Sydney)" 
<Martin.Visser@xxxxxx> wrote:
> Quick guess. Either multicast is disabled (registry
> setting) or somehow
> the multicast route for the LAN has been removed. Do
> "netstat -r" on
> your windows box it should have a line for each
> interface :
> 
>         224.0.0.0        224.0.0.0    LAN_IP	LAN_IP 
>          1
> 
> If this isn't there then the multicast traffic will
> go to your default
> gw
> 
> Martin Visser
> Network Consultant
> Technology & Infrastructure - Consulting &
> Integration
> COMPAQ, part of the new HP
> 
> 3 Richardson Place
> North Ryde, Sydney NSW 2113, Australia
> Phone *: +61-2-9022-1670    Mobile *:
> +61-411-254-513
>    Fax 7: +61-2-9022-1800     E-mail * :
> martin.visserAThp.com
> 
> 
> 
> 
> -----Original Message-----
> From: Erick B. [mailto:erickbe@xxxxxxxxx] 
> Sent: Thursday, 26 September 2002 12:56 PM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] SSDP / UPNP question and
> Win ME / XP
> 
> 
> Hi,
> 
> Does anyone on this list know of a Win ME or XP
> application or bug, that would send a SSDP / UPNP
> query to UDP port 1900 to a subnets default gateway
> (10.x.x.x address) instead of the 239.x.x.x
> multicast
> address for destination??  The packet detail is a
> SSDP
> / UPNP Search query. 
> 
> Just working on a trace here. Weird thing is when
> the
> PC sends this out the router on that subnet responds
> with a storm of ICMP redirects. 
> 
> Tia, Erick
> 
> =====
> "Those who are willing to trade freedom for security
> deserve neither
> freedom nor security." -- Benjamin Franklin
> 
> __________________________________________________
> Do you Yahoo!?
> New DSL Internet Access from SBC & Yahoo!
> http://sbc.yahoo.com
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
>
http://www.ethereal.com/mailman/listinfo/ethereal-users


__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com