Kitz ADSL Broadband Information
adsl spacer  
Support this site
Home Broadband ISPs Tech Routers Wiki Forum
 
     
   Compare ISP   Rate your ISP
   Glossary   Glossary
 
Please login or register.

Login with username, password and session length
Advanced search  

News:

Author Topic: Every 6 seconds from android phone UDP 137 traffic  (Read 2205 times)

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 7409
  • VM Gig1 - AAISP CF
Every 6 seconds from android phone UDP 137 traffic
« on: December 13, 2022, 05:19:47 PM »
So started today (no new apps installed)

Guest network blocking every 6 seconds traffic to 255.255.255.255 137 UDP.

I enabled traffic logging on my phone but it isnt picked up.

It stops when phone is moved around physically so whatever it is seems designed to stop when phone is lifted up.
« Last Edit: December 13, 2022, 05:39:49 PM by Chrysalis »
Logged

tonygibbs16

  • Member
  • **
  • Posts: 38
Re: Every 6 seconds from android phone UDP 137 traffic
« Reply #1 on: December 13, 2022, 05:35:25 PM »
I don't know why, but it seems odd since 255.255.255.25 is a Class E experimental range IPv4 address.

I would continue to block it.

Cheers, Tony
Logged

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 7409
  • VM Gig1 - AAISP CF
Re: Every 6 seconds from android phone UDP 137 traffic
« Reply #2 on: December 13, 2022, 05:38:49 PM »
Yeah its staying blocked, but was curious of the cause, which I have now found.

Its VLC media player, there is an option in there to toggle SMB protocol, but nothing in there to disable it, uninstalling the app.

The app has been on my phone for ages, but today was one clip which needed VLC to play, I played it in VLC and since then for hours every 6 seconds the UDP 137 traffic.

Replaced it with MPV.
« Last Edit: December 13, 2022, 05:48:42 PM by Chrysalis »
Logged

XGS_Is_On

  • Reg Member
  • ***
  • Posts: 479
Re: Every 6 seconds from android phone UDP 137 traffic
« Reply #3 on: December 13, 2022, 10:29:11 PM »
Quote from: tonygibbs16 on December 13, 2022, 05:35:25 PM
I don't know why, but it seems odd since 255.255.255.25 is a Class E experimental range IPv4 address.

Broadcast address. VLC doing NetBIOS name resolution via a broadcast. Potentially the video was opened via an SMB share, the share was left open and when the phone was in 'idle' VLC couldn't resolve.
Logged
YouFibre You8000 customer: symmetrical 8 Gbps.

Yes, more money than sense. Story of my life.

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 7409
  • VM Gig1 - AAISP CF
Re: Every 6 seconds from android phone UDP 137 traffic
« Reply #4 on: December 13, 2022, 10:39:45 PM »
Quote from: XGS_Is_On on December 13, 2022, 10:29:11 PM
Broadcast address. VLC doing NetBIOS name resolution via a broadcast. Potentially the video was opened via an SMB share, the share was left open and when the phone was in 'idle' VLC couldn't resolve.

Stored locally on phone. 
Logged

XGS_Is_On

  • Reg Member
  • ***
  • Posts: 479
Re: Every 6 seconds from android phone UDP 137 traffic
« Reply #5 on: December 13, 2022, 11:07:03 PM »
Wondered about that. I think I've seen VLC open local files via calls to 127.0.0.1. Wonder if it's using SMB to do this, or falls back to NetBIOS name resolution when some resources aren't available as the phone is asleep?
Logged
YouFibre You8000 customer: symmetrical 8 Gbps.

Yes, more money than sense. Story of my life.

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 7409
  • VM Gig1 - AAISP CF
Re: Every 6 seconds from android phone UDP 137 traffic
« Reply #6 on: December 14, 2022, 07:53:14 PM »
It does have a logcat option I think, so I guess if I felt inclined I could try to look into it a bit more.  It was hard trying to detect via android network tools as most couldnt see it.  Ended up with good old netstat on terminal emulator.
Logged
 

anything