The SSDP (Simple Service Discovery Protocol )
protocol can discover Plug & Play devices, with uPnP (Universal Plug
and Play). SSDP uses unicast and multicast adress (239.255.255.250).
SSDP is HTTP like protocol and work with NOTIFY and M-SEARCH methods.
SSDP can be used over IPv4 and IPv6.
Wireshark
The SSDP dissector is partially functional : there is no ssdp filter, but, the http filter show HTTP and SSDP protocols. Bug 6190 requests that this behavior be changed.
The solution is to:
- filter with the destination port (see Display filter)
- or filter based on packet contents (see Display filter)
if you suspect is wifi with ip: 128.100.20.52
We check,let confirm: we try ulr: http://128.100.20.52 , show face producer wifi
Confirm
Done
- reference: https://wiki.wireshark.org/SSDP