Once I get connected to the router, I see a continuous traffic flow ~ 45kbps/45kbps. Netstat reports no connections. If I disable uPnP on the router, the traffic stops, else it is endless.
Some packets captured using Wireshark.
POST /upnp/control/WANCommonIFC1 HTTP/1.1
Content-Type: text/xml; charset="utf-8"
SOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"
User-Agent: Mozilla/4.0 (compatible; UPnP/1.0; Windows 9x)
Host: 192.168.1.1:49152
Content-Length: 309
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
<?xml version="1.0"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><m:GetTotalBytesSent xmlns:m="urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1"/></SOAP-ENV:Body></SOAP-ENV:Envelope>
HTTP/1.1 200 OK
CONTENT-LENGTH: 330
CONTENT-TYPE: text/xml; charset="utf-8"
DATE: Mon, 26 Oct 2009 22:33:40 GMT
EXT:
SERVER: Linux/2.6.8.1, UPnP/1.0, Intel SDK for UPnP devices /1.2
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body>
<u:GetTotalBytesSentResponse xmlns:u="urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1">
<NewTotalBytesSent>2072480</NewTotalBytesSent>
</u:GetTotalBytesSentResponse>
</s:Body> </s:Envelope>
65 0.527721000 192.168.1.1 192.168.1.2 TCP 49152 > ice-location [PSH, ACK] Seq=1 Ack=670 Win=5840 Len=190
83 0.545354000 192.168.1.1 192.168.1.2 TCP 49152 > ice-router [PSH, ACK] Seq=1 Ack=629 Win=5840 Len=190
206 1.752107000 192.168.1.2 192.168.1.1 TCP tripe > 49152 [ACK] Seq=1 Ack=1 Win=17520 Len=0
270 2.479008000 192.168.1.2 192.168.1.1 TCP zieto-sock > 49152 [ACK] Seq=1 Ack=1 Win=17520 Len=0
etc...
The thing is that on Windows7 even if uPnP is enabled, I see nothing from all this.
Any clue guys?
