Avatar of JeffBeall
JeffBeallFlag for United States of America asked on

Windows Vista port broadcast

I have a Snort IDS, and noticed on my laptop running Windows Vista, that it keeps broadcasting on port 1900. Is there a way to make Vista stop broadcasting?
SecurityMicrosoft Legacy OSWindows Vista

Avatar of undefined
Last Comment
LegendZM

8/22/2022 - Mon
LegendZM

the Simple Service Discovery Protocol (SSDP) discovery service searches for
Universal Plug and Play devices on your home network. SSDP searches for upstream
Internet gateways using UDP port 1900 - a potential security risk many organizations
will want to block. OK, you decide to block SSDP services but to your surprise, your
firewall and network sniffers continue to see the UDP port 1900 packets. You have
disabled vista's SSDP and even Universal Plug and Play Device Host. Whats going on?
This is Universal Plug and Play Network Address Translation (NAT) traversal discovery
used by Messenger. If you run a sniffer trace, the following information is displayed
in the data section of the packet:

Start / Run / services.msc

Stop the Messenger service and set it to Disabled.
ASKER CERTIFIED SOLUTION
LegendZM

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
JeffBeall

"Stop the Messenger service and set it to Disabled"

Wow, I thought it was standard operating procedure to disable this service in XP. Now it's cropping up in Vista. Ultra secure Vista??!!
Anyhow, I can't find it in my services?
LegendZM

The other solution would be to modify the registry, see if that works.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23