We have a couple of HP 2200 sending UDP packets on port 1025 at a rate of 4 per second to a users PC. This PC is in the IT department and is running the Webjet Admin. One of our staff reconfigured the printers from the console and it is still sending off these packets. They are being blocked by our firewall, but it really creates a lot of false positives in the firewall logfiles. Here is an excerpt of the logfile from the firewall:
Statistics: duration=0.00 id=23oKV srcif=Vpn9 src=192.168.10.111/161 svsrc=192.168.0.249 dstif=Vpn9 dst=192.168.1.28/1025 proto=1025/udp (Not authorized)
10.111 is the HP 2200
0.249 is the firewall
1.28 is the IT user's PC
Any ideas on why the printer is spitting out this traffic?
Thanks!
Steve
Statistics: duration=0.00 id=23oKV srcif=Vpn9 src=192.168.10.111/161 svsrc=192.168.0.249 dstif=Vpn9 dst=192.168.1.28/1025 proto=1025/udp (Not authorized)
10.111 is the HP 2200
0.249 is the firewall
1.28 is the IT user's PC
Any ideas on why the printer is spitting out this traffic?
Thanks!
Steve