Re: SNMP Weirdness

From: Carlo Ottaviani (ottavianiat_private)
Date: Mon Jan 27 2003 - 04:50:36 PST

Next message: Gianni Tedesco: "wierd: udp port 0 traffic"

Previous message: abrettenat_private: "Re: graphical stats of new SQL worm"
In reply to: Christian Vogel: "Re: SNMP Weirdness"
Next in thread: James C Slora Jr: "RE: SNMP Weirdness"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

>Hi,
>
>
>>  I have a few internal machines sending the same queries to the same address.
>
>192.0.0.192 is the default address of HP "JetDirect" printerservers,
>so this most likely is some windows-PC trying to discover the printservers
>on the connected LAN.

I agree, I saw this in my LAN a loto of times, and finally I could 
reproduce it using the HP installation software with the option of 
discovering the printers on the network.
Bye
       Carlo



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Gianni Tedesco: "wierd: udp port 0 traffic"
Previous message: abrettenat_private: "Re: graphical stats of new SQL worm"
In reply to: Christian Vogel: "Re: SNMP Weirdness"
Next in thread: James C Slora Jr: "RE: SNMP Weirdness"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Jan 27 2003 - 09:18:00 PST