[Dshield] Re: [Please Explain...]

Josh Tolley josh at raintreeinc.com
Thu Oct 16 15:52:06 GMT 2003

Josh Tolley wrote:
Oops... This was supposed to go to the list, not specifically to you, 
Maxime. Sorry :)

> Maxime Ducharme wrote:
>> Hi,
>>    these packets are used by Windows XP to find out UPnP
>> devices on a network via SSDP (Simple Service Discovery Protocol ).
> It is true that Windows uses SSDP over port 1900 to find stuff like 
> your router, but MSN's Instant Messenger also generates these packets, 
> and they are part of its standard traffic. I noticed lots of port 1900 
> traffic on my network a few months ago and started worrying about the 
> UPnP problems Microsoft was having at about that same time. The 
> traffic ended up coming from instant messenger, so I quit worrying.
> Josh

More information about the list mailing list