XYMer's Home away from Home

When http://bbs.xlr8yourmac.com is down (i.e. always)
It is currently Tue Nov 21, 2017 7:49 pm

All times are UTC - 8 hours




Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: mDNSResponder
PostPosted: Tue Feb 28, 2017 5:39 pm 
Offline
User avatar

Joined: Thu May 15, 2008 8:10 pm
Posts: 676
I'm wondering what's going on today, I notice quite a few spinning beach balls ( I'm still using Snow leopard )
and I decided to look around to see what was causing it, Little Snitch showed that there was a large amount
of access tries thru mDNSRespoder ( at this writting 3360 tries ) Little Snitch blocked them all.
EyeTV seems to be also affected since I have it set to record shows.
This all seems to be on my local network, which I'm connected via ethernet, everyone else as far as I know
is WiFi connected.
Little Snitch says it's from UDP port 1900 with EyeTV and quite a few thru mDNSResponder
Is there a way to block these tries permanently thru another method ?


Top
 Profile  
 
 Post subject: Re: mDNSResponder
PostPosted: Tue Feb 28, 2017 6:04 pm 
Offline
Master

Joined: Sun Apr 20, 2008 5:24 am
Posts: 9694
Location: North of the State of Jefferson
You could try disabling Universal Plug and Play (UPnP) on your router, if it's currently enabled, and see if it makes any difference. Actually you probably should anyway, since it's an ill-conceived security hole. It probably won't help, however, because it's probably EyeTV trying to do some sort of service discovery.

- Anonymous


Top
 Profile  
 
 Post subject: Re: mDNSResponder
PostPosted: Tue Feb 28, 2017 7:46 pm 
Offline
User avatar

Joined: Thu May 15, 2008 8:10 pm
Posts: 676
I'll have to give it a try tomorrow, the router isn't in my space.
It's really mDNSResponder that's getting all the hits, EyeTV isn't running till a
scheduled program I want to record is on.


Top
 Profile  
 
 Post subject: Re: mDNSResponder
PostPosted: Wed Mar 01, 2017 7:15 pm 
Offline
Master

Joined: Sun Apr 20, 2008 5:24 am
Posts: 9694
Location: North of the State of Jefferson
mDNSResponder may be seeing/reacting/??? to multicast discovery messages from something trying to use Universal Plug and Play. What exactly is getting logged? Can you post some logged messages?

- Anonymous


Top
 Profile  
 
 Post subject: Re: mDNSResponder
PostPosted: Thu Mar 02, 2017 6:55 pm 
Offline
User avatar

Joined: Thu May 15, 2008 8:10 pm
Posts: 676
Anon, Where would I find the log files ?
I looked thru Console and didn't see anything related to mDNSResponder.

Problem is solved, met the new guy that's sharing a studio adjoining me, that had sent a file to print
and something got stuck somewhere and his computer was still looking for the printer.
No hits at all anymore other than normal .


Top
 Profile  
 
 Post subject: Re: mDNSResponder
PostPosted: Sat Mar 04, 2017 3:30 am 
Offline

Joined: Thu Jul 05, 2012 4:02 pm
Posts: 1021
Location: Melbourne
How do you fare when you send something to print over this network, assuming there is a printer serving? Maybe the new guy needs to tweak his network settings? Different OS' may be problematic too.


Top
 Profile  
 
 Post subject: Re: mDNSResponder
PostPosted: Sun Mar 05, 2017 1:09 am 
Offline
User avatar

Joined: Thu May 15, 2008 8:13 pm
Posts: 9566
Location: Caught between the moon and NYC
So basically his computer had a job in the queue of a printer that was attached via Bonjour, and since it didn't exist Bonjour kept looking for it in a panic.

Sounds like par for the course. Even when Bonjour theoretically can find the printer it still send out a ton of network traffic before it finds the printer. I just assign everything fixed DHCP leases and use DNS names to reach the printers... no broadcasts no multicasts just DNS lookup to IP to printer. Simple. The only time it doesn't work is when students are on a network that can't reach the printer.


Top
 Profile  
 
 Post subject: Re: mDNSResponder
PostPosted: Mon Mar 06, 2017 1:45 am 
Offline

Joined: Thu Jul 05, 2012 4:02 pm
Posts: 1021
Location: Melbourne
MonkeyBoy wrote:
So basically his computer had a job in the queue of a printer that was attached via Bonjour, and since it didn't exist Bonjour kept looking for it in a panic.

Sounds like par for the course. Even when Bonjour theoretically can find the printer it still send out a ton of network traffic before it finds the printer. I just assign everything fixed DHCP leases and use DNS names to reach the printers... no broadcasts no multicasts just DNS lookup to IP to printer. Simple. The only time it doesn't work is when students are on a network that can't reach the printer.

Thanks MB for the tip about using DHCP for how devices can be specifically linked within a network, instead of broadcast.


Top
 Profile  
 
 Post subject: Re: mDNSResponder
PostPosted: Mon Mar 06, 2017 11:31 am 
Offline
User avatar

Joined: Thu May 15, 2008 8:10 pm
Posts: 676
roam wrote:
How do you fare when you send something to print over this network, assuming there is a printer serving? Maybe the new guy needs to tweak his network settings? Different OS' may be problematic too.


I don't use a shared printer or a printer sever I have my own private printer so I wouldn't know.
It's an odd set up here, the studio that the router is in is all wifi with possibly a shared printer
and I'm in a private space at the far end and I'm hardwired to the modem.
Seems that he fixed whatever it was that was pinging the network, normal traffic now.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC - 8 hours


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group