Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Third Party Tools » I am getting a strange Dest ip

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

I am getting a strange Dest ip


Posted by kadar on July 13, 2005 01:57:12

Hello

on the base_main.php, Traffic Profile by Protocol, I am getting 99% UDP traffic.All this traffic go to a strange destination ip 239.255.255.250 port 1900. Anybody please has explaination to this.

I appreciate your reply.


Posted by chris on July 13, 2005 03:56:39

Hi Kadar, which platforms are you running ?, it's one of the Class D multicast addresses.