ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Ethereal-users: SV: [Ethereal-users] UDP to 224.0.0.103

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Roger Almstedt" <roger.almstedt@xxxxxxxxxxx>
Date: Tue, 29 Mar 2005 07:08:02 +0200
Thanks for your answers, its not Outlook that cause the traffic. I will try TCPView.
 
/Roger


Från: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] För Uwe E. Bilger
Skickat: den 29 mars 2005 06:45
Till: Ethereal user support
Ämne: RE: [Ethereal-users] UDP to 224.0.0.103

Hello,
 
Multicast addresses in the range 224.0.0.0 - 224.0.0.255 is for local addresses only and should have a ttl of 1 only. They are not routed by properly running routers.
 
Roger, TCPview from Sysinternals is probably the tool you are looking for:
 
 TCPView v2.34
See all open TCP and UDP endpoints. On Windows NT, 2000 and XP TCPView even displays the name of the process that owns each endpoint. Full source to the command-line version of this tool, netstatp, is included.
 
I personally would be interested if you could report back which program was sending to this multicast address.
 
Regards,
 
Uwe
 
 
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx]On Behalf Of Scott Lowrey
Sent: Tuesday, March 29, 2005 01:07
To: Ethereal user support
Subject: Re: [Ethereal-users] UDP to 224.0.0.103

Google for that address (use quotes).  You'll find it's used by the Multi Directory Access Protocol (MDAP).  Something wants to talk to a directory server.  Now google for MDAP Microsoft, since their software tends to be overly chatty and in constant need of the Mother Ship. :)

Is Outlook running?

Roger Almstedt wrote:
Hi,
 
Just started to use Ethereal and discovered right away that my computer is sending all the time (2 times per second) an UDP package to IP adress:
224.0.0.103 sourceport 3009 or 1027, destinationport 3235.
That cant be normal, maybe this is not at question for this list, but I would appreciate if anyone can help me with an answer.
 
Best Regards
Roger
 


_______________________________________________ Ethereal-users mailing list Ethereal-users@xxxxxxxxxxxx http://www.ethereal.com/mailman/listinfo/ethereal-users

--
Scott Lowrey
Test Engineering Manager
NexTone Communications
Gaithersburg, Maryland USA

1.240.912.1369