[Dshield] Should I be concerned about this?

Shane Castle swcxt at co.boulder.co.us
Wed Jun 26 14:18:18 GMT 2002


On Wed, 26 Jun 2002, E.B. Dreger wrote:

>M> Date: Tue, 25 Jun 2002 20:34:33 -0400
>M> From: Mercy
>
>M> "The firewall has blocked routed traffic from 68.71.167.143 to
>M> 222.174.130.106 (IP Protocol 117).
>
>Note that 222.... is
>a class D multicast address.  Do you know if you're running any
>multicast-aware software?

No, it's not, it's a class C: 222 = 11011110 binary; note that only
the leftmost two bits are on.  Multicast starts at 224, which is the
leftmost 3 bits on.  It is, however, reserved by IANA:

whois -h whois.arin.net 222.174.130.106

IANA (RESERVED-5)
   Internet Assigned Numbers Authority
   4676 Admiralty Way, Suite 330
   Marina del Rey, CA 90292-6695
   US

   Netname: RESERVED
   Netblock: 221.0.0.0 - 223.255.255.255

   Coordinator:
      Internet Corporation for Assigned Names and Numbers  (IANA-ARIN)
      res-ip at iana.org (310) 823-9358

   Record last updated on 03-Dec-2001.
   Database last updated on  25-Jun-2002 20:00:18 EDT.

-- 
Shane Castle             | "Perfection, then, is finally achieved, not
Boulder County Info Svcs | when there is nothing left to add, but when
Boulder CO USA           | there is nothing left to take away."
                         |                - Antoine de Saint-Exupery





More information about the list mailing list