Ethereal-users: RE: [Ethereal-users] UDP Packets everywhere

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Claude Chauveau" <cjc@xxxxxxxxxxx>
Date: Tue, 31 May 2005 22:23:46 -0700
This appears to be multicast traffic..... ie - a one-to-many broadcast application running on your network, transmitting from several machines on your network.  I'd find out who owns these machines, and what they are broadcasting???  My guess is that it's some type of conferencing application.  Cheers!
 
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx]On Behalf Of Paul.White@xxxxxxxxxxxxxxxxxxx
Sent: Tuesday, May 31, 2005 7:02 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] UDP Packets everywhere


Hi all.. I am new to Ethereal so please excuse my lack of knowledge.  I am also unsure if this is the right list for this kind of question, if not can someone point me in the right direction??


A slow network lead me to install Ethereal and see if it could find the problem.  When I did the first capture I saw 70% UDP packets all of which looked like the following:-

Source  :   10.0.xxx.xxx  (most PCs on our network)

Destination :   232.47.16.89   (always)

Protocol :   UDP

Source port :  1117 (appears to be random, not always 1117)

Destination port :  47713  (always)

Length 71


Can anyone help?  I have slowed it a bit by implementing filtering on our switch but while that stops the broadcasts it still slows the PCs.  No viruses or spyware found either.


I have attached a text file with 2 packets exported from Ethereal.

 

 

Thanks

Paul ***************************************************************** "This message is intended for the addressee named and may contain confidential information. If you are not the intended recipient, please delete it and notify the sender. Views expressed in this message are those of the individual sender, and are not necessarily the views of Bathurst Regional Council, unless otherwise stated. For the purposes of the Copyright Act, the permission of the holder of copyright in this communication may be taken to have been granted, unless stated otherwise, for the copying or forwarding of this message, as long as both the content of this communication and the purpose for which it is copied or forwarded are work related." *****************************************************************