Talk:Simple Service Discovery Protocol
|WikiProject Computing / Networking||(Rated Start-class, Low-importance)|
SSDP uses ports 2869 and 1900
as per [Microsoft Knowledge Base Article 832017 http://support.microsoft.com/default.aspx?scid=kb;en-us;832017], aka "Service overview and network port requirements for the Windows Server system", SSDP uses ports 2869 and 1900. 2869 is for SSDP event notification, while 1900 is for SSDP other uses.
There's even an SSDP legacy event notification, at port 5000.
Example of what network traffic looks like?
It seems that the packets look like HTTP, but with method "M-SEARCH". On my network I see the following information (with a destination port of 1900, which seems to be the standard port for 'SSDP') in a very HTTP protocolish manner (key/value headers and newlines):
M-SEARCH * HTTP/1.1 Host:184.108.40.206:1900 ST:urn:schemas-upnp-org:device:InternetGatewayDevice:1 Man:"ssdp:discover" MX:3
I don't know enough about this topic to feel comfortable adding the section myself, I would prefer not to post incorrect information
Updated URL for attacks whitepaper
It appears the URL for the whitepaper describing DDOS attacks appears to be a stale link. https://msisac.cisecurity.org/whitepaper/documents/9.pdf — Preceding unsigned comment added by 220.127.116.11 (talk) 19:42, 5 September 2016 (UTC)