FW: hey had eric sent you

Sat Mar 13 04:56:59 UTC 2004

On Fri, 2004-03-12 at 21:17, Riley, Marty wrote:

>  10:17:16.416222 IP 192.168.1.1.1900 > 239.255.255.250.1900: udp 278
> 

This is UPnP discovery. Take a look here:
http://www.nthelp.com/upnpscrewup.htm
http://www.linuxsa.org.au/mailing-list/2002-11/1134.html

I see a lot of unicast UPnP traffic on my networks. 
UPnP seems like a train wreck waiting to happen, to me.

It would be interesting to see what happens if one
of your users turns UPnP off on their host.

Just a shot in the dark.

-- 
James H. Edwards
Routing and Security
At the Santa Fe Office: Internet at Cyber Mesa  
jamesh at cybermesa.com
noc at cybermesa.com