[mythtv-users] Weird mythsocket error messages on master / fixes/31

Bill Meek keemllib at gmail.com
Sun Jun 6 14:50:52 UTC 2021


On 6/6/21 9:38 AM, John Hoyt wrote:
>     I would guess that you have a hacker or some rogue process that is sending messages to your mythtv box. Is your port open to the internet?
>     Port 6543 is normally the MythTV port. You can see these errors if you run telnet localhost 6534 and then type random junk into telnet. Each
>     line of stuff you type will be reported as a protocol error in mythbackend (unless you by chance type a valid MythTV command :).
> 
> 
> Thanks Peter.  This is interesting as I block port 6543 access from outside my network - so that means the rouge client is inside somehow.  I'll
> have to play around with some host firewall rules and VLAN firewall rules to better determine the source.
> 
> Would enabling more detailed mythtv log help show a source for the socket connection?

Another option:

I'd shutdown everything MythTV and fire up Wireshark on the backend
(if possible).

You might see more text like the OPTIONS TNMP DmnP GIOP fragments.

-- 
Bill


More information about the mythtv-users mailing list