packets to 192.168.1.255 UDP

Hi

I am running tcpdump on my linux box and seeing a large number of
packets coming out of a windows box to
192.168.1.255.ipp UDP, length

Does anyone have any idea what is is going to and what is the ipp on
the address.

Thanks
Jim

"(E-Mail Removed)" <(E-Mail Removed)> writes:

> Hi
>
> I am running tcpdump on my linux box and seeing a large number of
> packets coming out of a windows box to
> 192.168.1.255.ipp UDP, length

I'll hazard a guess that it means 192.168.1.255, port 631.

These would be broadcast Internet Printing Protocol packets, probably
either asking what printers are available or announcing the availability
of a printer on the windows box.

> Does anyone have any idea what is is going to and what is the ipp on
> the address.
>
> Thanks
> Jim

--
As we enjoy great advantages from the inventions of others, we should
be glad of an opportunity to serve others by any invention of ours;
and this we should do freely and generously. (Benjamin Franklin)

"(E-Mail Removed)" <(E-Mail Removed)> writes:
> I am running tcpdump on my linux box and seeing a large number of
> packets coming out of a windows box to
> 192.168.1.255.ipp UDP, length
>
> Does anyone have any idea what is is going to and what is the ipp on
> the address.

The Windows box is attempting to discover what printers it can use.

--
http://www.greenend.org.uk/rjk/

Joe & Richard

Thank you for the quick answer. I've been trying to better understand
a number of protocols I am seeing with tpcdump. And you have
answered that one.

Jim

On Thu, 13 Jan 2011 16:16:52 -0800 (PST), "(E-Mail Removed)"
<(E-Mail Removed)> wrote:

>Hi
>
> I am running tcpdump on my linux box and seeing a large number of
>packets coming out of a windows box to
>192.168.1.255.ipp UDP, length

As soon as you see 192.168.1.xxx, you should know this is an address
on your network.

Oftentimes, 192.168.1.254 is the default address for your DSL
Modem/Gateway/Router.

The addresses of systems connected to your network will default to:
192.168.1.xxx.

You can change these defaults by logging into the router and changing
some settings.

However, it doesn't sound like you have the background as yet, to
safely play with those. Do it wrong, and your network goes kablooiey.

IMHO,

MJR

TheGunslinger <(E-Mail Removed)> writes:

> On Thu, 13 Jan 2011 16:16:52 -0800 (PST), "(E-Mail Removed)"
> <(E-Mail Removed)> wrote:
>
>>Hi
>>
>> I am running tcpdump on my linux box and seeing a large number of
>>packets coming out of a windows box to
>>192.168.1.255.ipp UDP, length
>
> As soon as you see 192.168.1.xxx, you should know this is an address
> on your network.
>
> Oftentimes, 192.168.1.254 is the default address for your DSL
> Modem/Gateway/Router.

Not 192.168.1.1? Note he was asking about 192.168.1.255 (not 254). 255
is, of course, the normal broadcast address.

> The addresses of systems connected to your network will default to:
> 192.168.1.xxx.
>
> You can change these defaults by logging into the router and changing
> some settings.
>
> However, it doesn't sound like you have the background as yet, to
> safely play with those. Do it wrong, and your network goes kablooiey.

While taking care is always a good idea, asking questions like this is
the best way I can think of to learn what he's doing before making any
disastrous mistakes.
--
As we enjoy great advantages from the inventions of others, we should
be glad of an opportunity to serve others by any invention of ours;
and this we should do freely and generously. (Benjamin Franklin)

On Fri, 2011-01-14, TheGunslinger wrote:
> On Thu, 13 Jan 2011 16:16:52 -0800 (PST), "(E-Mail Removed)"
> <(E-Mail Removed)> wrote:
>
>>Hi
>>
>> I am running tcpdump on my linux box and seeing a large number of
>>packets coming out of a windows box to
>>192.168.1.255.ipp UDP, length
>
> As soon as you see 192.168.1.xxx, you should know this is an address
> on your network.
>
> Oftentimes, 192.168.1.254 is the default address for your DSL
> Modem/Gateway/Router.
>
> The addresses of systems connected to your network will default to:
> 192.168.1.xxx.
>
> You can change these defaults by logging into the router and changing
> some settings.
>
> However, it doesn't sound like you have the background as yet, to
> safely play with those. Do it wrong, and your network goes kablooiey.

Fine, but note that "ncjim" didn't ask about how to renumber his
network -- he just asked "what is this packet I'm seeing in tcpdump?"

/Jorgen

--
// Jorgen Grahn <grahn@ Oo o. . .
\X/ snipabacken.se> O o .