Snort mailing list archives
Re: Snort-users digest, Vol 1 #3238 - 10 msgs
From: <djmurd () cox net>
Date: Thu, 5 Jun 2003 12:14:23 -0400
With respect to your UPNP traffic - there is a service on Windows XP (SSDP Discovery or something very close) that will attempt to "ask the network" about configurable devices and "attempt to configure" or "manage" devices on the network. This is UPNP. Security = Naught. Suggest you have the users disable UPNP on thier XP systems. MSFT article describing UPNP: http://support.microsoft.com/default.aspx?scid=kb;en-us;323713 General article discussing UPNP vulnerabilities: http://support.microsoft.com/default.aspx?scid=kb;en-us;315000 Don Murdoch, Systems Engineer ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. Designed with thread debugging features you've never dreamed of, try TotalView 6 free at www.etnus.com. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: Snort-users digest, Vol 1 #3238 - 10 msgs djmurd (Jun 05)