Garbled print jobs - others seeing this?

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

Garbled print jobs - others seeing this?

jsparks
Hi,
over the course of the past several months, three different networked printers are printing garbled text.
Usually just one line per page, but 20 -30 pages at random times!  I'm not sure how to troubleshoot this.
I assume I have a user sending these jobs but I'm not sure how to locate or block.  The jobs queue do not show any active.
ANy thoughts please?

Jay
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Garbled print jobs - others seeing this?

Vivian Sophia
Hi Jay,

CSS IT has seen a marked uptick in these types of prints during the last month or so. They can be caused by an incorrect print driver, but this latest batch seems to be an attack, that comes through the FTP port. Ways to alleviate:

1) Turn off FTP and other protocols not in use on your networked printers. 
2) Set up IP filtering to allow printing only from subnets that should be sending jobs
3) Turn off printers at night, if that is when these attacks take place
4) Add an admin password to the HTTP interface to prevent unauthorized personnel from making changes

You also could set up a firewall on your subnet, but that's a lot more trouble




Vivian Sophia
Berkeley IT 
CSS IT High-Impact Client Support Lead
Micronet Community of Practice Coordinator
University of California, Berkeley
310B Durant Hall
(510) 541-6120

On Mon, Jan 4, 2016 at 10:49 AM, jsparks <[hidden email]> wrote:
Hi,
over the course of the past several months, three different networked
printers are printing garbled text.
Usually just one line per page, but 20 -30 pages at random times!  I'm not
sure how to troubleshoot this.
I assume I have a user sending these jobs but I'm not sure how to locate or
block.  The jobs queue do not show any active.
ANy thoughts please?

Jay




--
View this message in context: http://micronet-at-uc-berkeley.840177.n3.nabble.com/Garbled-print-jobs-others-seeing-this-tp4029588.html
Sent from the Micronet at UC Berkeley mailing list archive at Nabble.com.


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Garbled print jobs - others seeing this?

jsparks
Thanks Vivian!


On Mon, Jan 4, 2016 at 11:02 AM, Vivian Sophia <[hidden email]> wrote:
Hi Jay,

CSS IT has seen a marked uptick in these types of prints during the last month or so. They can be caused by an incorrect print driver, but this latest batch seems to be an attack, that comes through the FTP port. Ways to alleviate:

1) Turn off FTP and other protocols not in use on your networked printers. 
2) Set up IP filtering to allow printing only from subnets that should be sending jobs
3) Turn off printers at night, if that is when these attacks take place
4) Add an admin password to the HTTP interface to prevent unauthorized personnel from making changes

You also could set up a firewall on your subnet, but that's a lot more trouble




Vivian Sophia
Berkeley IT 
CSS IT High-Impact Client Support Lead
Micronet Community of Practice Coordinator
University of California, Berkeley
310B Durant Hall
<a href="tel:%28510%29%20541-6120" value="+15105416120" target="_blank">(510) 541-6120

On Mon, Jan 4, 2016 at 10:49 AM, jsparks <[hidden email]> wrote:
Hi,
over the course of the past several months, three different networked
printers are printing garbled text.
Usually just one line per page, but 20 -30 pages at random times!  I'm not
sure how to troubleshoot this.
I assume I have a user sending these jobs but I'm not sure how to locate or
block.  The jobs queue do not show any active.
ANy thoughts please?

Jay




--
View this message in context: http://micronet-at-uc-berkeley.840177.n3.nabble.com/Garbled-print-jobs-others-seeing-this-tp4029588.html
Sent from the Micronet at UC Berkeley mailing list archive at Nabble.com.


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Garbled print jobs - others seeing this?

Beth Muramoto
In reply to this post by Vivian Sophia
Vivian and MIcronet,

I, too, have been having issues with this and wanted to log in to turn off FTP and TelNet etc. but when I set up the HP Laserjet 600 models a couple of years ago, I didn't see a way to create an account  so that I could access via IP though the browser. I haven't found information on the HP site to guide me. Has anyone done this with this model or other HP models (it's occurred to me that this has been happening to 3 printers also in particular all Laserjet 600 models -- Jay, were yours HPs?)

Thanks for any help and feedback.

Beth

On Mon, Jan 4, 2016 at 11:02 AM, Vivian Sophia <[hidden email]> wrote:
Hi Jay,

CSS IT has seen a marked uptick in these types of prints during the last month or so. They can be caused by an incorrect print driver, but this latest batch seems to be an attack, that comes through the FTP port. Ways to alleviate:

1) Turn off FTP and other protocols not in use on your networked printers. 
2) Set up IP filtering to allow printing only from subnets that should be sending jobs
3) Turn off printers at night, if that is when these attacks take place
4) Add an admin password to the HTTP interface to prevent unauthorized personnel from making changes

You also could set up a firewall on your subnet, but that's a lot more trouble




Vivian Sophia
Berkeley IT 
CSS IT High-Impact Client Support Lead
Micronet Community of Practice Coordinator
University of California, Berkeley
310B Durant Hall
<a href="tel:%28510%29%20541-6120" value="+15105416120" target="_blank">(510) 541-6120

On Mon, Jan 4, 2016 at 10:49 AM, jsparks <[hidden email]> wrote:
Hi,
over the course of the past several months, three different networked
printers are printing garbled text.
Usually just one line per page, but 20 -30 pages at random times!  I'm not
sure how to troubleshoot this.
I assume I have a user sending these jobs but I'm not sure how to locate or
block.  The jobs queue do not show any active.
ANy thoughts please?

Jay




--
View this message in context: http://micronet-at-uc-berkeley.840177.n3.nabble.com/Garbled-print-jobs-others-seeing-this-tp4029588.html
Sent from the Micronet at UC Berkeley mailing list archive at Nabble.com.


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.



-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.




--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  (510) 643-0203 
Fax:  (510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Garbled print jobs - others seeing this?

Michael
Hi Beth,

By default the web console user is admin and there is no password.  If you are accessing the page and it is requiring credentials though, that would indicate a password has been set for the admin account.  In that case, if you don't know the password, you would need to reset the printer(s) to the factory default.  This is supposed to be a fairly simple task with HP printers, but I've run into a few printers that didn't want to cooperate.

To reset most HP printers, while powering them up, you need to hold down either the 'X' or the 'Menu' button.  (depends on model)  The printer should display the option to perform a 'cold reset,' I think it's called.  This is where I've run into issues in the past.  Some printers require 3 or 4 power cycles before the option appears.

If you have questions, or run into issues, please let me know, and I'll help where I can.

Regards,
Michael

UHS' "printer guy"
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Garbled print jobs - others seeing this?

Bruce Satow
Once you get in, you may wish to try updating the firmware on the
printer if that is possible.

On 1/5/2016 12:42 PM, Michael wrote:

> Hi Beth,
>
> By default the web console user is admin and there is no password.  If you
> are accessing the page and it is requiring credentials though, that would
> indicate a password has been set for the admin account.  In that case, if
> you don't know the password, you would need to reset the printer(s) to the
> factory default.  This is supposed to be a fairly simple task with HP
> printers, but I've run into a few printers that didn't want to cooperate.
>
> To reset most HP printers, while powering them up, you need to hold down
> either the 'X' or the 'Menu' button.  (depends on model)  The printer should
> display the option to perform a 'cold reset,' I think it's called.  This is
> where I've run into issues in the past.  Some printers require 3 or 4 power
> cycles before the option appears.
>
> If you have questions, or run into issues, please let me know, and I'll help
> where I can.
>
> Regards,
> Michael
>
> UHS' "printer guy"
>
>
>
>
> --
> View this message in context: http://micronet-at-uc-berkeley.840177.n3.nabble.com/Garbled-print-jobs-others-seeing-this-tp4029588p4029592.html
> Sent from the Micronet at UC Berkeley mailing list archive at Nabble.com.
>
>  
> -------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
>
> http://micronet.berkeley.edu
>
> Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
>
> ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

ANNOUNCEMENTS: To send announcements to the Micronet list, please use the [hidden email] list.