The SSDP (Simple Service Discovery Protocol ) protocol can discover Plug & Play devices, with uPnP (Universal Plug and Play). SSDP uses unicast and multicast adress (184.108.40.206). SSDP is HTTP like protocol and work with NOTIFY and M-SEARCH methods.SSDP can be used over IPv4 and IPv6.
The SSDP dissector is partially functional : there is no ssdp filter, but, the http filter show HTTP and SSDP protocols. Bug 6190 requests that this behavior be changed.
The solution is to:
- filter with the destination port (see Display filter)
- or filter based on packet contents (see Display filter)
if you suspect is wifi with ip: 220.127.116.11
We check,let confirm: we try ulr: http://18.104.22.168 , show face producer wifi
- reference: https://wiki.wireshark.org/SSDP