UDP request discarded from 192.168.52.7/7765 to inside:255.255.255.255/7765

[mahesh18]

Hi Everyone.

On My Home ASA  i checked the logs it has few logs of

Apr 16 2013 21:36:39: %ASA-7-710005: UDP request discarded from 192.168.52.7/7765 to inside:255.255.255.255/7765

where 192.168.52.7 is my PC  IP.

Need to know why this message is showing up in ASA logs.

Thanks

MAhesh

[Julio Carvajal]

Hello Mahesh,

the real question here is why is that PC sending a broadcast packet

[Julio Carvajal · Accepted solution]

Try to run wireshark and confirm that indeed the PC is sending broadcast to the asa ( It is expected that the ASA would drop them)

Looks like that particular service ( UDP 7765 ) is related to quickTime streaming traffic from apple.

Remember to rate all of the helpful posts

[mahesh18]

Hi,

This message is coming very regularly.

Seems will run the wireshark tomorrow after work and will update you.

Thanks

MAhesh

[mahesh18]

Hi,

I have captured the wireshark when no internet website was opened.

i ssh to ASA  by switch IP 192.168.20.2

Also attached the wireshark capture to the original post.

Thanks

Mahesh

[Julio Carvajal]

Hello Mahesh,

not good at all..

Did you took this capture on the host itself or on the ASA?

[Julio Carvajal · Accepted solution]

Either way this sounds like an app not behaving correctly,

why would you want to broadcast this traffic , if you know what I mean

Try to close the applications running on your PC until you check that the traffic disappears then you will be able to determine.

In fact let's make it better ( the way we should do this is next )

Use the powerful netstat

netstat -b

netstat - ano

Then look for the process ID side each connection

Finaly go to your PC Star task manager /Services and match the PID

Regards

Remember to rate all of the helpful posts

[mahesh18]

Hi,

I will try this when i am at home today and will update you.

Thanks

Mahesh

[Julio Carvajal]

Hello Mahesh,

Great, let me know man,

We are here to help

[Rudy Sanjoko · Accepted solution]

a little research told me that port 7765 is used by quicktime streaming server and also GunZ, if you have these apps running on your PC try to disable or uninstall them for a while to check. otherwise you will need to follow jcarvaja's instructions.

[Julio Carvajal · Accepted solution]

Hello Rudy,

Yeah that's what I said on my second post

Julio said:

Try to run wireshark and confirm that indeed the PC is sending broadcast to the asa ( It is expected that the ASA would drop them)

Looks like that particular service ( UDP 7765 ) is related to quickTime streaming traffic from apple.

[mahesh18]

Hi julio,

I did netstat -b and -ano.

i could not find port 7765 on source and destination ip.

Seems PC is sending broadcast and ASA  is stopping that.

under task manager i could not find quick time or something to close it.

I can live with it for now.

Thanks for the help it gave me something to look for.

Regards

Mahesh

[Julio Carvajal]

Hello Mahesh

Sure, you could reboot the PC and check if that problem comes back,

Have a great day

[Rudy Sanjoko]

oeps, i missed that one!

[Julio Carvajal]

Hello Rudy,

No problem man

Have a great day