Link to home
Start Free TrialLog in
Avatar of JeffBeall
JeffBeallFlag for United States of America

asked on

Windows Vista port broadcast

I have a Snort IDS, and noticed on my laptop running Windows Vista, that it keeps broadcasting on port 1900. Is there a way to make Vista stop broadcasting?
Avatar of LegendZM
LegendZM
Flag of United States of America image

the Simple Service Discovery Protocol (SSDP) discovery service searches for
Universal Plug and Play devices on your home network. SSDP searches for upstream
Internet gateways using UDP port 1900 - a potential security risk many organizations
will want to block. OK, you decide to block SSDP services but to your surprise, your
firewall and network sniffers continue to see the UDP port 1900 packets. You have
disabled vista's SSDP and even Universal Plug and Play Device Host. Whats going on?
This is Universal Plug and Play Network Address Translation (NAT) traversal discovery
used by Messenger. If you run a sniffer trace, the following information is displayed
in the data section of the packet:

Start / Run / services.msc

Stop the Messenger service and set it to Disabled.
ASKER CERTIFIED SOLUTION
Avatar of LegendZM
LegendZM
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of JeffBeall

ASKER

"Stop the Messenger service and set it to Disabled"

Wow, I thought it was standard operating procedure to disable this service in XP. Now it's cropping up in Vista. Ultra secure Vista??!!
Anyhow, I can't find it in my services?
The other solution would be to modify the registry, see if that works.