On 4/23/20 00:56, Walter H. wrote:
Hello
my Win10 box fills up the log of my router (Linux box)
[23-Apr-2020; 05:44:11.861029] IP[IN]: IN=br0 OUT=
MAC=ff:ff:ff:ff:ff:ff:a8:5e:11:3d:8f:77:08:00 SRC=192.168.1.10
DST=192.168.1.255 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=51279 PROTO=UDP
SPT=5050 DPT=5050 LEN=51
[23-Apr-2020; 05:44:16.864767] IP[IN]: IN=br0 OUT=
MAC=ff:ff:ff:ff:ff:ff:a8:5e:11:3d:8f:77:08:00 SRC=192.168.1.10
DST=192.168.1.255 LEN=71 TOS=0x00 PREC=0x00 TTL=128 ID=51280 PROTO=UDP
SPT=5050 DPT=5050 LEN=51
these are 2 entries, nearly every 5 second one entry (source port and
destination port always 5050/udp);
what might causing these - I guess broadcast?
Thanks,
Walter
192.168.1.255 would be a broadcast address assuming your network is
192.168.1.0/24. There isn't really any way to tell what application is
sending them based on what you've provided other than to do a search for
applications that send broadcasts using port 5050.
What you might want to do is look at the client machine and see which
application is bound to that port, but that's more of a Windows question
than a netfilter question.
