Traffic Log - NTP Logs Why..??

[Rojopipe]

Hi Guys,

Why in a SEP client appears IP address of another clients in the traffic log of the a SEP client..?

Example:

(This image log is taken of the SEP client with IP 192.168.0.111)

Is necessary register this..?

Is possible to avoid it..?

Thanks.

[ℬrίαη]

The screen is too small to see, can you post as a jpeg?

 

[Rojopipe]

Hi _Brian,

of course..

[ℬrίαη]

It looks like web traffic, is that on port 80? Is that a proxy server? Do you know that IP address?

[Rojopipe]

attached the image

[ℬrίαη]

Are you familiar with those hosts?

Port 1900 (UDP) is UPnP traffic. Basically it's network discovery. You can turn that off in Windows 7 .Or you can create a firewall rule to block. I believe there is one already created in the SEP fw 

[Rojopipe]

Yes, those IP are other PC's on the network.

My concern is why the host 192.168.0.111 host writes in his log traffic from other host ..? It is as if SEP client work of "promiscuously" as does wireshark or any other sniffer. I think that makes a lot of noise and generates extra load to this PC (192.168.0.111) that records information of others host.

As could be avoided ..? In short, it only records the traffic is concerned

[ℬrίαη]

That type of traffic from the other host is triggering that specific firewall rule. You do have the option to turn off logging for that rule but that should be the expected result if logging is turned on

[ℬrίαη]

Do you need more assistance with your problem or were you able to get it resolved?

If you could post an update for followers of this thread that would be most helpful.

Otherwise, if resolved, you can close the thread out by clicking the "Mark as solution" link at the bottom left on the most helpful post. This will benefit admins looking for a resolution to the same problem.

Thanks and take care,
Brian