All Roku Boxes Constanly Floods Router with ICMP

Archived
1

Hi: I’d like to know why all Roku boxes constantly send ICMP Requests to port 137 to the Router. Why is there a need to constantly flood my router with ICMP requests?? -

UTC 12/15/2010 21:04:27.304 Notice Network Access ICMP packet dropped due to policy 192.168.168.133, 137, X2 192.168.., 137, X2 ICMP Destination Unreachable, Code: 3

192.168.168.133 = Roku box
192.168.. = Router/Gateway

This is not normal. This has to be a design flaw in Roku’s software.

I have to unplug the roku box every time when it is not in use because it constantly floods the router.

Resets and RMA’s do not fix this issue. Is there a need that this Roku Box needs to icmp my router constantly???

2

PACKET DETAIL

Ethernet Header
Ether Type: IP(0x800), Src=[roku mac address here], Dst=[gateway mac address gere]
IP Packet Header
IP Type: ICMP(0x1), Src=[192.168.168.133/Roku box], Dst=[192.168../Router]
ICMP Packet Header
ICMP Type = 8(ECHO_REQUEST), ICMP Code = 0(), ICMP Checksum = 265
Value:[0]
Consumed, Module Id:47 0:0)

3

HEX DUMP

0017c54f 54b2000d 4b7023b9 08004500 00d40000 40004001 …OT…Kp#…E…@.@.
67aac0a8 a885c0a8 a8a80800 01090000 00006162 63646566 g…abcdef
6768696a 6b6c6d6e 6f707172 73747576 77616263 64656667 ghijklmnopqrstuvwabcdefg
68696a6b 6c6d6e6f 70717273 74757677 61626364 65666768 hijklmnopqrstuvwabcdefgh
696a6b6c 6d6e6f70 71727374 75767761 62636465 66676869 ijklmnopqrstuvwabcdefghi
6a6b6c6d 6e6f7071 72737475 76776162 63646566 6768696a jklmnopqrstuvwabcdefghij
6b6c6d6e 6f707172 73747576 77616263 64656667 68696a6b klmnopqrstuvwabcdefghijk
6c6d6e6f 70717273 74757677 61626364 65666768 696a6b6c lmnopqrstuvwabcdefghijkl
6d6e6f70 71727374 75767761 62636465 66676869 6a6b6c6d mnopqrstuvwabcdefghijklm
6e6f7071 72737475 7677 *nopqrstuvw *

4

Is this connected through wireless or Ethernet?

Also, what, in your mind, constitutes “flooding”? (how many ICMP requests a second are you seeing?)

5

Running a windows system on your net? 137 is used for netbios name resolution.

6

“kbenson” wrote:
Is this connected through wireless or Ethernet?

Also, what, in your mind, constitutes “flooding”? (how many ICMP requests a second are you seeing?)

The Roku box is using its wireless connection to my wireless router via AES Encryption using Mac filtering.

how many ICMP requests a second are you seeing?)
Alot I will look at my logs when I get home from work tonight and paste here.

Thanks.

7

Your other thread in the General Discussion forum has a response from a Roku employee:
viewtopic.php?f=28&t=34987&p=225540#p225540

8

And this has been discussed to death at this point.