Ethereal-users: RE: [Ethereal-users] UDP Packets everywhere

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Visser, Martin" <martin.visser@xxxxxx>
Date: Tue, 14 Jun 2005 11:34:20 +1000
Paul,
 
Just wondering if you managed to sort out your multicast issue?
 
Martin 

Martin Visser, CISSP
Network and Security Consultant
Consulting & Integration
Technology Solutions Group - HP Services

410 Concord Road
Rhodes
 NSW  2138
Australia

Mobile: +61-411-254-513
Fax: +61-2-9022-1800    
E-mail: martin.visser@xxxxxx

This email (including any attachments) is intended only for the use of the individual or entity named above and may contain information that is confidential, proprietary or privileged. If you are not the intended recipient, please notify HP immediately by return email and then delete the email, destroy any printed copy and do not disclose or use the information in it.

 


From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Paul.White@xxxxxxxxxxxxxxxxxxx
Sent: Wednesday, 1 June 2005 12:02 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] UDP Packets everywhere


Hi all.. I am new to Ethereal so please excuse my lack of knowledge.  I am also unsure if this is the right list for this kind of question, if not can someone point me in the right direction??


A slow network lead me to install Ethereal and see if it could find the problem.  When I did the first capture I saw 70% UDP packets all of which looked like the following:-

Source  :   10.0.xxx.xxx  (most PCs on our network)

Destination :   232.47.16.89   (always)

Protocol :   UDP

Source port :  1117 (appears to be random, not always 1117)

Destination port :  47713  (always)

Length 71


Can anyone help?  I have slowed it a bit by implementing filtering on our switch but while that stops the broadcasts it still slows the PCs.  No viruses or spyware found either.


I have attached a text file with 2 packets exported from Ethereal.

 

 

Thanks

Paul ***************************************************************** "This message is intended for the addressee named and may contain confidential information. If you are not the intended recipient, please delete it and notify the sender. Views expressed in this message are those of the individual sender, and are not necessarily the views of Bathurst Regional Council, unless otherwise stated. For the purposes of the Copyright Act, the permission of the holder of copyright in this communication may be taken to have been granted, unless stated otherwise, for the copying or forwarding of this message, as long as both the content of this communication and the purpose for which it is copied or forwarded are work related." *****************************************************************