johny_2000
Occasional Visitor
Hello,
I have a problem with a node device on this router.
It's flooding the attached to LAN1 PC with tons of SSDP packets every tens of seconds.
Here's the log file from the PC:
============================================================================================
Dec 15 18:05:31 kernel: [16760.044712] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=36757 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:05:55 kernel: [16784.049400] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=49489 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:06:14 kernel: [16803.050064] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=58433 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:06:35 kernel: [16824.047655] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=5038 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:06:51 kernel: [16840.046137] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=7169 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:07:13 kernel: [16862.049881] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=19950 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:07:34 kernel: [16883.050188] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=26770 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:07:51 kernel: [16900.046965] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=36633 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
============================================================================================
The Asus node IP-address: 192.168.1.16
MAC: d4:5d:64:4c:28:80
The PC IP-address: 192.168.1.127
MAC: 1c:69:7a:62:a0:c5
I have UPnP disabled in the settings.
I also turned off UPnP Media Server and IGMP snooping.
But nothing helped and it still does it now.
What else can be?
I have a problem with a node device on this router.
It's flooding the attached to LAN1 PC with tons of SSDP packets every tens of seconds.
Here's the log file from the PC:
============================================================================================
Dec 15 18:05:31 kernel: [16760.044712] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=36757 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:05:55 kernel: [16784.049400] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=49489 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:06:14 kernel: [16803.050064] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=58433 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:06:35 kernel: [16824.047655] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=5038 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:06:51 kernel: [16840.046137] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=7169 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:07:13 kernel: [16862.049881] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=19950 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:07:34 kernel: [16883.050188] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=26770 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
Dec 15 18:07:51 kernel: [16900.046965] [UFW BLOCK] IN=eno1 OUT= MAC=1c:69:7a:62:a0:c5:d4:5d:64:4c:28:80:08:00 SRC=192.168.1.16 DST=192.168.1.127 LEN=301 TOS=0x00 PREC=0x00 TTL=64 ID=36633 DF PROTO=UDP SPT=1900 DPT=60677 LEN=281
============================================================================================
The Asus node IP-address: 192.168.1.16
MAC: d4:5d:64:4c:28:80
The PC IP-address: 192.168.1.127
MAC: 1c:69:7a:62:a0:c5
I have UPnP disabled in the settings.
I also turned off UPnP Media Server and IGMP snooping.
But nothing helped and it still does it now.
What else can be?