Adalbert Prokop wrote:
Bob Goodwin wrote on Sunday 04 November 2007:
Listed by source hosts:
Logged 63 packets on interface eth0
From 192.168.1.6 - 63 packets to igmp(0) udp(161,5353)
It appears that I [192.168.1.6] am the source of them? Should I
have 5353 open? What is their significance?
5353 is used by Windows dynamic DNS. If you're not supporting dynamic
DNS on your local network, you can continue to drop/ignore the
packets. They're needed only by a DNS/DHCP server.
That raises the question then, why am I trying to send them?
Do I have something configured wrong?
As Luciano pointed out, it is the mDNS service. Therefor you probably have
an active mDNS server instance (e.g. avahi) which announces your machine
throughout the local network.
Should I open this port? would it benefit the Windows and Mac users on
my LAN? If so will it do that without increasing traffic to and from my
ISP?
Googling mdns has not been very helpful in answering my questions ...
Bob Goodwin