Belkin port 19540 inbound UDP

Norton Security | Norton Internet Security
1

I googled Belkin port 19540 to see if others were having my issue, close but nothing that matched perfectly.  I have a Belkin F5L009.  A USB hub that lets you "share" devices over the network.  I can connect the devices from my XP machine but not my Vista machine. 

 

I found a local file, installed on my machine when Belkin software installed, that provided pictorial instructions for Norton InternetSecurity.  That did not help.  Basically the instructions said toallow the Belkin connect software.

 

C:\Program Files\Belkin\Network USB Hub ControlCenter\Help\Firewall\Firewall.html

 

NIS 2009 is installed on both XP and Vista machines.  Since one works and one doesn't I looked in the NIS history logs for a clue.  I see an inbound UDP packet from my working machine, but I do not see an inbound UDP packet from my nonworking machine.  

 

I can ping the Belkin from both machines.  Belkin support suspects no problems with their device as it is working from the XP machine.

 

Any suggestions as to why the Vista machine may not be seeing the inbound UDP packet?

2

Hi Skunesh,

 

Welcome to Norton Community!

 

Are you able to connect to the devices when you disable the Smart Firewall of NIS 2009 in Vista machine?

 

Check the Network Security Map, make sure that the USB hub device is listed there and set it to Trusted.

 

Yogesh

Message Edited by yogesh_mohan on 09-04-2009 10:33 AM
3

With the smart firewall disabled, the devices still do not connect.  The Belkin is set to full trust.

4

Can I presume you know how to enter Belkin modem router setup utility?

Please check MAc address filtering, client IP filters.

Leaving Norton full functional, can you disable Belkin firewall?

5

I have a SMC router, both mac filtering and client filtering are not enabled.  The router has another firewall setting that is on:

Setup | Advanced Settings | Firewall 

Do you want to enable the hacker attack monitoring and logging function? yes | no


The Barricade's firewall can block common hacker attacks, including IP Spoofing, Land Attack, Ping of Death, IP with Zero Length, Smurf Attack, UDP port Loopback, Snork Attack, TCP Null Scan, and TCP SYN Flooding. The firewall does not significantly affect system performance, so we advise leaving it enabled to protect your network users.

 

My preference is to leave that turned on.  Here's an example log event:

2009/09/03 08:54:06  ** TCP SYN Flooding **  <IP/TCP>  192.168.2.24:50557 ->> 24.25.26.136:80

 

So, I temporarily turned this router/firewall off and got the same result.  I can see the USB attached devices plugged into the Belkin USB hub from Network USB Hub ControlCenter.  Unfortunately, same result, USB device does not connect to Vista machine.

 

 

 

 

6

Just to confirm, is the hub listed as a device in the Vista network settings.  It would seem that if deactivating the firewalls still do not allow a connection, then the network settings should be rechecked.  Does Norton in the Vista machine see the router instead of the hub?

7

From the vista machine, I can ping so basic networking is there.  The mac address matches the sticker on the Belkin 00173fb4320c.

C:\Users\Kunesh-Vista>arp -a 192.168.2.19

Interface: 192.168.2.29 --- 0x8
  Internet Address      Physical Address      Type
  192.168.2.19          00-17-3f-b4-32-0c     dynamic

 

In Norton Network Security Map it sees the hub

Trust Level:

 FULL TRUST Connection:  ONLINE    Physical Address:  00-17-3F-B4-32-0C    IP Address:  192.168.2.19
8

I believe the software from Belkin is installed/running because Netstat -an on both Vista and XP show they are listening for inbound UDP 19540.  So I'm still looking for diagnostic tools that can help me pinpoint the connectivity issue with Vista.

 

 From XP:

C:\Documents and Settings\KUNESH>netstat -an

Active Connections

  Proto  Local Address          Foreign Address        State

  UDP    0.0.0.0:19540          *:* 

 

From Vista:

 C:\Users\Kunesh-Vista>netstat -an

 

Active Connections

 

  Proto  Local Address          Foreign Address        State

  UDP    0.0.0.0:19540          *:*

9

I see some differences in the history log and in the packet captures between the 2 machines.

 

working xp: Firewall rules were automatically created for Belkin Network USB Hub Control Center.

In Wireshark trace I see TCP session established with the Belkin, the 3-way handshake, Syn, syn ack, ack  

 

nonworking vista: Firewall rules DO NOT have rules were automatically created.

In Wireshark trace there is no TCP session established

 

How are automatic rules being built on one machine and not the other?