Security Incidents mailing list archives

Re: SNMP Weirdness


From: Carlo Ottaviani <ottaviani () ism cnr it>
Date: Mon, 27 Jan 2003 13:50:36 +0100

Hi,


 I have a few internal machines sending the same queries to the same address.

192.0.0.192 is the default address of HP "JetDirect" printerservers,
so this most likely is some windows-PC trying to discover the printservers
on the connected LAN.

I agree, I saw this in my LAN a loto of times, and finally I could reproduce it using the HP installation software with the option of discovering the printers on the network.
Bye
      Carlo



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com


Current thread: