Ethereal-users: Re: [Ethereal-users] Strange SRVLOC on OS X

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Thu, 27 Jul 2006 18:11:51 +0200 (CEST)
Hi,

This is a multicast message, a service locate request actually.

It works as follows. A process in your MAC sends out this message on a
'partyline' to which possible services are listening. If they get the
message, they'll respond, offering their services. A pretty standard
service discovery mechanism.

Thanx,
Jaap

On Sun, 9 Jul 2006, Eric Osterweil wrote:

>
>
>
> I'm a newb to Ethereal, and I just fired it up on my mac.  While doing nothing on the network, and having closed any apps that I'd expect to send data, I saw some specious SRVLOC packets going to an IP that is very odd: 239.255.255.253
>
> Can anyone take a look at this sample and tell me if I have a problem (or what it might be)?  I think it looks like its announcing afp, smb, nfs and ftp to this IP.
>
> Any help?
>
> Tia,
>
> Eric
>
> ------------------
>
> No.     Time        Source                Destination           Protocol Info
>       2 43.860714   192.168.9.2           239.255.255.253       SRVLOC   Service Request, V2 XID - 60194
>
> Frame 2 (78 bytes on wire, 78 bytes captured)
> Ethernet II, Src: AppleCom_2c:58:40 (00:11:24:2c:58:40), Dst: 01:00:5e:7f:ff:fd (01:00:5e:7f:ff:fd)
> Internet Protocol, Src: 192.168.9.2 (192.168.9.2), Dst: 239.255.255.253 (239.255.255.253)
> User Datagram Protocol, Src Port: 60208 (60208), Dst Port: svrloc (427)
> Service Location Protocol
>     Version: 2
>     Function: Service Request (1)
>     Packet Length: 36
>     Flags: 0x2000
>     Next Extension Offset: 0
>     XID: 60194
>     Lang Tag Len: 2
>     Lang Tag: en
>     Previous Response List Length: 0
>     Previous Response List:
>     Service Type Length: 3
>     Service Type List: afp
>     Scope List Length: 7
>     Scope List: DEFAULT
>     Predicate Length: 0
>     Predicate:
>     SLP SPI Length: 0
>     SLP SPI:
>
> No.     Time        Source                Destination           Protocol Info
>       3 43.864196   192.168.9.2           239.255.255.253       SRVLOC   Service Request, V2 XID - 60195
>
> Frame 3 (78 bytes on wire, 78 bytes captured)
> Ethernet II, Src: AppleCom_2c:58:40 (00:11:24:2c:58:40), Dst: 01:00:5e:7f:ff:fd (01:00:5e:7f:ff:fd)
> Internet Protocol, Src: 192.168.9.2 (192.168.9.2), Dst: 239.255.255.253 (239.255.255.253)
> User Datagram Protocol, Src Port: 60209 (60209), Dst Port: svrloc (427)
> Service Location Protocol
>     Version: 2
>     Function: Service Request (1)
>     Packet Length: 36
>     Flags: 0x2000
>     Next Extension Offset: 0
>     XID: 60195
>     Lang Tag Len: 2
>     Lang Tag: en
>     Previous Response List Length: 0
>     Previous Response List:
>     Service Type Length: 3
>     Service Type List: smb
>     Scope List Length: 7
>     Scope List: DEFAULT
>     Predicate Length: 0
>     Predicate:
>     SLP SPI Length: 0
>     SLP SPI:
>
> No.     Time        Source                Destination           Protocol Info
>       4 43.878954   192.168.9.2           239.255.255.253       SRVLOC   Service Request, V2 XID - 60196
>
> Frame 4 (78 bytes on wire, 78 bytes captured)
> Ethernet II, Src: AppleCom_2c:58:40 (00:11:24:2c:58:40), Dst: 01:00:5e:7f:ff:fd (01:00:5e:7f:ff:fd)
> Internet Protocol, Src: 192.168.9.2 (192.168.9.2), Dst: 239.255.255.253 (239.255.255.253)
> User Datagram Protocol, Src Port: 60210 (60210), Dst Port: svrloc (427)
> Service Location Protocol
>     Version: 2
>     Function: Service Request (1)
>     Packet Length: 36
>     Flags: 0x2000
>     Next Extension Offset: 0
>     XID: 60196
>     Lang Tag Len: 2
>     Lang Tag: en
>     Previous Response List Length: 0
>     Previous Response List:
>     Service Type Length: 3
>     Service Type List: nfs
>     Scope List Length: 7
>     Scope List: DEFAULT
>     Predicate Length: 0
>     Predicate:
>     SLP SPI Length: 0
>     SLP SPI:
>
> No.     Time        Source                Destination           Protocol Info
>       5 43.879919   192.168.9.2           239.255.255.253       SRVLOC   Service Request, V2 XID - 60197
>
> Frame 5 (78 bytes on wire, 78 bytes captured)
> Ethernet II, Src: AppleCom_2c:58:40 (00:11:24:2c:58:40), Dst: 01:00:5e:7f:ff:fd (01:00:5e:7f:ff:fd)
> Internet Protocol, Src: 192.168.9.2 (192.168.9.2), Dst: 239.255.255.253 (239.255.255.253)
> User Datagram Protocol, Src Port: 60211 (60211), Dst Port: svrloc (427)
> Service Location Protocol
>     Version: 2
>     Function: Service Request (1)
>     Packet Length: 36
>     Flags: 0x2000
>     Next Extension Offset: 0
>     XID: 60197
>     Lang Tag Len: 2
>     Lang Tag: en
>     Previous Response List Length: 0
>     Previous Response List:
>     Service Type Length: 3
>     Service Type List: ftp
>     Scope List Length: 7
>     Scope List: DEFAULT
>     Predicate Length: 0
>     Predicate:
>     SLP SPI Length: 0
>     SLP SPI:
>
>
>
>
> _______________________________________________
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users