Someone can explain to me ?

[JesseFrank]

Below is part of a system log from my router. The IP addresses are from my CCTV cameras that are hardwired into my network hub.

I get a system log like this maybe 10 times a day, without me resetting the cameras or whatever. What is going on ?

Jan 6 22:15:48 (none) local6.debug upnpd[25391]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: TCP ExtPort: 8000 Int: 192.168.x.xxx.8000
Jan 6 23:13:53 (none) local6.debug upnpd[25391]: DeletePortMap: Proto:TCP Port:8000
Jan 6 23:13:53 (none) local6.debug upnpd[4594]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: TCP ExtPort: 8000 Int: 192.168.x.xxx.8000
Jan 6 23:40:21 (none) local6.debug upnpd[4594]: DeletePortMap: Proto:TCP Port:8000
Jan 6 23:40:21 (none) local6.debug upnpd[25391]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: TCP ExtPort: 8000 Int: 192.168.x.xxx.8000
Jan 7 00:05:33 (none) local6.debug upnpd[25391]: DeletePortMap: Proto:TCP Port:8000
Jan 7 00:05:33 (none) local6.debug upnpd[4594]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: TCP ExtPort: 8000 Int: 192.168.x.xxx.8000
Jan 7 00:29:58 (none) local6.debug upnpd[25391]: DeletePortMap: Proto:TCP Port:8000
Jan 7 00:29:58 (none) local6.debug upnpd[4594]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: TCP ExtPort: 8000 Int: 192.168.x.xxx.8000

[JesseFrank]

I gonna add some more. The port 64073 is the port set in Utorrent to download a file, while the IP address is that of a skybox connected to the network which is in use currently, however it isn't streaming from Utorrent. So why are they mentioned in one line ?

I have such an idea that there is a setting wrong in the router.

Jan 7 01:16:57 (none) local6.debug upnpd[25391]: GateDeviceGetSpecificPortMappingEntry: PortMapping Doesn't Exist...
Jan 7 01:16:57 (none) local6.debug upnpd[4594]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: TCP ExtPort: 64073 Int: 192.168.2.151.64073
Jan 7 01:16:57 (none) local6.debug upnpd[25391]: GateDeviceGetSpecificPortMappingEntry: PortMapping Doesn't Exist...
Jan 7 01:16:57 (none) local6.debug upnpd[4594]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: UDP ExtPort: 64073 Int: 192.168.2.151.64073

[RichCor]

Jan 6 22:15:48 (none) local6.debug upnpd[25391]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: TCP ExtPort: 8000 Int: 192.168.x.xxx.8000

The CCTV camera software is requesting an incoming PORT Forward be set up or taken down on your router.

UPnP d Universal Plug and Play (UPnP) daemon (service) used to automatically program NAT-based routers to allow outside requests and data.

AddPortMap is a request to create a new Port Forward

DeletePortMap: Proto:TCP Port:8000 is a request to delete/close any previously opened Port Forward

WANIPConn1 is your router Internet-side connection

TCP ExtPort: 8000 is outside internet-facing router port 8000 using TCP protocol

Int 192.168.x.x:8000 is the inside LAN IP and PORT address that your device will be listening on.

This is all normal log traffic and can be ignored. That is, the router is logging that the camera(s) are making requests so they can be accessed from the outside, via the Internet.

[RichCor]

Your second example is more of the same

as you say, probably uTorrent requesting TCP and then UDP port forwarding

[JesseFrank]

Thanks. 8000 is the port my cameras are listening on, but why they are requesting to be accessed via the internet ?

Wouldn't it be safer to disable that function.

[RichCor]

That would be up to you. Some people want to have access to them from the Internet. If that is not your desire, then there should be an option in the camera setup to disable this.

[JesseFrank]

That would be up to you. Some people want to have access to them from the Internet. If that is not your desire, then there should be an option in the camera setup to disable this.

Since i'm on a 3G connection, I understand that it isn't possible to connect to them from outside anyway, because with 3G all incoming ports are blocked by the ISP. Is that correct ?

[RichCor]

3G data connections usually utilize Carrier Grade NAT, so those types of direct connection will not work. Might as well disable that feature.

When direct connections aren't possible or feasible some CCTV cameras have several alternate methods of allowing outside connections by making constant outgoing calls to a secure 3rd party server -- though that meaning a lot of outgoing traffic that goes against data caps.

[TPI]

Wow! The whole conversation is so far above this little black duck!!!!