Security Access Violation - UDP port 1900

[uniformsierra]

Hello,
I have been running Vitamin D Video for a few years and recently moved to Sighthound.
Since moving to Sighthound I now get constant security alerts from my QNAP NAS TS-410 (QTS 4.0.2).
The QNAP reports this security alert by email;

[Security] Access Violation from <IP address> with UDP (port=1900)

I have disabled these native windows services on the Sighthound machine (as they use port 1900), however the error continues;
SSDP Discovery Service
UPnP Device Host

Using netstat -a -n -o I can confirm that the Process ID for Sighthound is opening the UDP port 1900.
I am not using the FTP or the "open this port in my router" options.
This machine is running in a XEN Center VM, Window 7 x32 bit.
Other than generating this alert on my NAS, the program is running fine.

Can anyone please tell me why UDP port 1900 is opened and what it is doing? I want Sighthound to stop generating this alert message.

Cheers

[ryan]

1900/UDP is used by the UPnP protocol to broadcast information about devices to listeners on the network. This is used by Sighthound Video to automatically locate and list cameras supporting this protocol in the setup wizard, as well as allowing these cameras to be connect to by their UPnP identifier rather than an IP address which might changed with network reboots or DHCP reassignments.

Nothing in regard to our UPnP code or its usage has changed since Vitamin D, so I'm unsure why your device would begin alerting now. I'm also not familiar with the device or software you are using, perhaps it recently updated or changed it's logic, or perhaps you have new UPnP devices on your network that are generating extra traffic/packets.

[uniformsierra]

Hi Ryan,
Thanks for the reply.
I also find it odd and can't resolve the alerts (that are continuing).
Am I right in thinking that when the cameras have been defined within Sighthound and the system is armed that it shouldn't (need to) be using UPnP at all? I defined my camera streams manually.

When I had Vitamin D setup I did use my QNAP NAS as an FTP server (successfully). I setup Sighthound in a fresh VM running Win7 and did not setup the FTP server, yet the FTP server is generating the alert message from the new VM! Strange.

[ryan]

I'm not intimately familiar offhand with that segment of the application, but I believe several data structures are created at app launch for speed reasons. One being the initialization overhead, and two being that it will passively listen to devices announcing their presence as gathering that information is not instantaneous. Active searches (sending a broadcast message to the network and asking compatible devices to reply) is done while the add/edit camera dialogs are up.

I'm not familiar with QNAP, and I'm really unsure why it would be labeling harmless requests as security access violations unless in a debug or high verbose mode.