What Is Scan Upnp Service Discover Attempt Snort

Snort mailing list archives

Browse UPnP service discover attempt

From: Marker Williamson <snortuser () nunswithguns co uk>
Date: Wed, 04 Jun 2003 fifteen:17:31 +0000

Greetings,

There are two hosts on this network that every 5 seconds or and then cause snort to alert

            [**] [i:1917:four] Browse UPnP service observe attempt [**]           [Classification: Detection of a Network Scan] [Priority: 3]            ...........

each alert is repeated iii times from each host to the same destination (the gateway router on this network)

Both of the hosts are running Windows XP and Snort is running on Slackware nine.0.0

I see on the snort.org site what this is SID:1917 - just the part that troubles me is the False Positive and False Negative sections -

            False Positives: A scanner may be used in a security inspect.       Faux Negatives: None Known.  If this is the instance why am i seeing these hosts "ticking" similar this?

Whatever help on this matter would exist much appreciated, I've rtfm and googled and checked the mail service annal nevertheless i discover no answers to my quandry.

            Thank you once more,  Mark    ------------------------------------------------------- This SF.net email is sponsored by:  Etnus, makers of TotalView, The all-time thread debugger on the planet. Designed with thread debugging features y'all've never dreamed of, try TotalView half dozen free at www.etnus.com. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge cyberspace Go to this URL to alter user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://world wide web.geocrawler.com/redir-sf.php3?listing=snort-users

Electric current thread:

Scan UPnP service discover endeavor Marker Williamson (Jun 04)
- RE: Scan UPnP service discover effort Thomas T. Evans, III (Jun 04)
  - Re: Scan UPnP service notice attempt Mark Williamson (Jun 04)
- Re: SCAN UPnP service discover attempt Joerg Weber (Jun 04)
- <Possible follow-ups>
- RE: SCAN UPnP service find attempt Bruyere, Michel (Jun 04)
  - Re: SCAN UPnP service discover try Marker Williamson (Jun 04)
  - Re: Browse UPnP service observe attempt Marker Williamson (Jun 04)
- RE: Browse UPnP service discover attempt Schmehl, Paul L (Jun 04)
- RE: Scan UPnP service discover endeavor bmcdowell (Jun 04)
- RE: SCAN UPnP service discover attempt Garrett . Allen (Jun 04)