NVR Broadcasting

[Samee]

i have a hikvision ds7608ni-e2/8p and have a firewall VPN router in place. i have by default stopped all traffic going out from the NVR and only permitted DNS 8.8.8.8 and 8.8.4.4 and ip address ranges of the email servers the NVR uses when motion is detected etc.

i have been monitoring the Firewall logs for the past few days and it seems to be broadcasting to 255.255.255.255 always using

PROTO=UDP
SPT=38874
DPT=7989

does any body know what it might be doing?
its broadcasting every 3 minutes

 

[alastairstevenson]

Mine, on FW version 3.4.91 also broadcast on that destination port.
Without seeing the packet contents, hard to say for sure, but likely to be this : GigE Vision - Wikipedia

 

[AR308USR]

255.255.255.255 is the global broadcast address for your local network. Basically the NVR saying "Hey I'm here"

"A special definition exists for the IP broadcast address 255.255.255.255. It is the broadcast address of the zero network or 0.0.0.0, which in Internet Protocol standards stands for this network, i.e. the local network. Transmission to this address is limited by definition, in that it is never forwarded by the routers connecting the local network to other networks."

Broadcast address - Wikipedia