Snort UpnP Alert on Ubuntu
I am using Ubuntu 11.04 and have just started using Snort!. (I installed the latest version of Snort! a couple of months ago.) When I run the following Snort! command
I get the following output.
sudo snort -d -c /etc/snort/snort.conf -h 192.168.1.0/24 -l /etc/snort
(This is posted by references to web links which I cannot post since I am a new member.)
[**] [1:1384:8] MISC UPnP malformed advertisement [**]
[Classification: Misc Attack] [Priority: 2]
01/21-20:18:02.413927 192.168.1.1:1900 -> 184.108.40.206:1900
UDP TTL:4 TOS:0x0 ID:0 IpLen:20 DgmLen:360 DF
I followed the references and it appears that this is mainly a Windows problem and I am using Linux. However I do not think that I need UPnP and it appears to be a security risk. So I would like to disable it but have not found a good explanation about how to disable it, at least on Linux. I would be most grateful if someone could tell me how to do so.