Simple Service Discovery Protocol (SSDP)
The SSDP protocol can discover Plug & Play devices, with uPnP (Universal Plug and Play). SSDP uses unicast and multicast adress (126.96.36.199). SSDP is HTTP like protocol and work with NOTIFY and M-SEARCH methods.
SSDP can be used over IPv4 and IPv6.
- SSDP uses UDP transport protocol on port 1900
The SSDP dissector is partially functional : there is no ssdp filter, but, the http filter show HTTP and SSDP protocols. Bug 6190 requests that this behavior be changed.
The solution is to:
- filter with the destination port (see Display filter)
- or filter based on packet contents (see Display filter)
SSDP has no preference setting.
Example capture file
udp.dstport == 1900
All UDP packets containing HTTP header:
udp contains "HTTP/1.1"
All UDP packets containing both HTTP header and UPnP search type header ("\nST:"), eg. UPnP search request:
(udp contains "HTTP/1.1") and (udp contains 0a:53:54:3a)
udp port 1900