[Dshield] igrp-routers-mcast.net

John Hebert jhebert02 at snet.net
Fri Jul 5 01:23:19 GMT 2002


On Wednesday, July 03, 2002 5:15 PM, Wayne Beckham Wrote:

>I was taking a look at the TRAFSHOW for a little sniffer I've got
>running and came across a system attempting to contact
>igrp-routers-mcast.net.  The protocol is shown to be "unk"
>
>I'm not sure what to make of this - can anyone explain it to me?

Wayne,

A Cisco router using IGRP will occasionally advertise using a multicast to
igrp-routers.mcast.net.  If you check the IP address (224.0.0.10) you will
notice that it is a multicast address.  This traffic (usually) is normal.

-John Hebert




More information about the list mailing list