Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 1 down vote favorite

My home network has a router/NAT (WNR3500L) and a wireless repeater (WN2500RP) of the same brand (Netgear). Since the repeater has a dynamic IP, the manufacturer put in place a special web address that directly resolves to the current repeater IP. The mechanism is stated to work with the majority of routers.

Using "dig", I see that the DNS request to the special address is directly resolved by the router DNS server (Bind running on an embedded Linux); no matter from which point of the network I send the DNS request, I always get the same internal address.

Then, sniffing the wireless traffic at the repeater bootup, I only notice this traffic toward the router:

  • SSDP Notify HTTP messages
  • DHCP Handshake
  • STP messages

So how does this work?

share|improve this question
1  
Hi @ziu, welcome to IT Security. This is really a networking question, not a security question (though I can definitely see the implied implications for misuse :) ). – AviD Jul 23 '12 at 7:23
@ziu Is there something about either answer I provided that you feel is inadequate? – Everett Jul 25 '12 at 4:03
@Everett No, I'm sorry: I had to deal with some backlog and I hadn't the time to do some happy hacking. – ziu Jul 28 '12 at 22:12

migrated from security.stackexchange.com Jul 23 '12 at 7:44

2 Answers

up vote 1 down vote accepted

SSDP does a number of things for you. First of all, it tells you that the device exists, with a URL. You should then see an icon appear in various places on Windows that you can click on in order to open up a web browser to access to pages on the device to manage it. That's especially important for the multipurpose devices that support disk drives, music players, printers, and so on.

From Wikipedia: SSDP is a text-based protocol based on HTTPU. It uses the User Datagram Protocol (UDP) as the underlying transport protocol. Services are announced by the hosting system with multicast addressing to a specifically designated IP multicast address at port number 1900. In IPv4, the multicast address is 239.255.255.250[3] and SSDP over IPv6 uses the address set ff0X::c for all scope ranges indicated by X.

share|improve this answer
I'll dig into the traces to confirm this and accept the annswer. – ziu Jul 28 '12 at 22:12
up vote 1 down vote

Would you mind posting the manufacturer and specific pieces of equipment?

Regardless, this may answer your question

share|improve this answer
yep I'll modify the question – ziu Jul 22 '12 at 23:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.