NAS hammering my network with broadcast packets

[Telos]

Any idea of what is causing this?

Continually... at 4 second (approx) intervals.

Source address is the NAS LAN IP.

How would I pinpoint the cause?

 

[EAZ1964]

Looks to me like a torrent (deluge or the likes) port.
Any torrent running, you can check what port it uses.

 

[Telos]

Any torrent running, you can check what port it uses.

Thanks. No torrent program running (my Docker torrent container is shut down).

I turned off Windows Discovery (on NAS) and that had no effect.

 

[EAZ1964]

You can try to use the tcpdump
ssh login your NAS and change to root and run this command:

tcpdump -i ethX -w /volume1/<share>/tcpdump.pcap

(where ethX is the LAN interface they are connecting to; LAN1 = eth0, LAN2 = eth1, etc.; <share> should be changed to the shared folder name in your NAS ; press CTRL-C to stop capture)

In this .pcap file all tcp traffic is present, you can search and try to find the messages...

Last option:
Shutting down packages on the DS (or stop everything and start 1 by 1 may also lead to a suspect. If you have something like a smart switch, you can at least stop the broadcast sending the message to all ports on the switch.

-- post merged: 1. May 2021 --

and maybe plex? Plex Flooding 32414 and 32412

 

[fredbert]

Did a google for 'TCP 32414' and this was at/near the top, from 2014 but sounds similar...

Plex Flooding 32414 and 32412

The udp ports are used for discovery - I would not call once a second flooding Wait and see what others say. I am not at home so cannot look at the wireshark capture. Plex media server.log from startup time would be useful to look at.

forums.plex.tv

Oops, didn't check your link @EAZ1964

 

[Telos]

maybe plex? Plex Flooding 32414 and 32412

Nailed it. Thank you. Seems to be something that I must live with.

 

[fredbert]

One each, hmm?

 

[EAZ1964]

I worked for many years in worlds 2nd biggest biscuit company, seen enough of those. Prefer something stronger nowadays

 

[Telos]

How about an Oatmeal Stout? Best of both worlds!

 

[EAZ1964]

Looks great! let us find a bar...