Ethereal-users: RE: [Ethereal-users] UDP to 224.0.0.103
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
|
Hello,
Multicast addresses in the range 224.0.0.0 - 224.0.0.255 is for
local addresses only and should have a ttl of 1 only. They are not routed by
properly running routers.
Roger,
TCPview from Sysinternals is probably the tool you are looking for:
TCPView v2.34
See all open TCP and UDP
endpoints. On Windows NT, 2000 and XP TCPView even displays the name of the
process that owns each endpoint. Full source to the command-line version of
this tool, netstatp, is included.
I
personally would be interested if you could report back which program was
sending to this multicast address.
Regards,
Uwe
Google for that address (use quotes).
You'll find it's used by the Multi Directory Access Protocol (MDAP).
Something wants to talk to a directory server. Now google for MDAP
Microsoft, since their software tends to be overly chatty and in constant need
of the Mother Ship. :)
Is Outlook running?
Roger Almstedt wrote:
Hi,
Just started to use Ethereal and discovered right away
that my computer is sending all the time (2 times per second) an UDP package
to IP adress:
224.0.0.103 sourceport 3009 or 1027, destinationport 3235.
That cant be normal,
maybe this is not at question for this list, but I would appreciate
if anyone can help me with an
answer.
Best Regards
Roger
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
|