On Sat, 2006-02-11 at 11:13 +0530, Vikram Goyal wrote: > Inbound IN=eth0 OUT= MAC= SRC=192.168.1.2 DST=239.255.255.250 LEN=161 > TOS=0x00 PREC=0x00 TT L=1 ID=0 DF PROTO=UDP SPT=1900 DPT=1900 LEN=141 > > This is kernel message in /var/log/messages which I wanted to ask > about. > > I think this is an inbound request but ip-addr in SRC is same as mine > which I get from dsl-router through dhcp. > > Can any one explain this to me please and also if anything needs to be > done about it. You probably want to look up port 1900, and see what's trying to use it, then you can figure out whether it's a problem. e.g. <http://grc.com/port_1900.htm> and other webpages refer to it having something to do with UPnP and/or Windows Messenger. You don't mention whether "your IP" means a PC in your LAN, or the same one that the log is recorded on. If it's a Windows box on your LAN, or this box is a gateway for Windows boxes, it could just that you've got messenger (or some other application using UPnP because it's not really NAT compatible) trying to figure its way out to the internet. -- Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists.
