On Thu, Jun 22, 2000 at 01:08:02AM -0500, Will Trillich wrote: > Q: what's the 224.0.0.0 ip/netmask for? That's for multicast. I don't know much about multicast, maybe someone else can help there. > Q: what's the scheme behind ports '* -> *'? From any port to any port. > Jun 20 00:18:00 server kernel: IP fw-in deny eth0 ICMP/10 172.146.51.93 224.0.0.2 L=28 S=0x00 I=50959 F=0x0000 T=128 > Jun 20 00:18:03 server kernel: IP fw-in deny eth0 ICMP/10 172.146.51.93 224.0.0.2 L=28 S=0x00 I=51215 F=0x0000 T=128 > Jun 20 00:17:57 server kernel: IP fw-in deny eth0 ICMP/10 172.146.51.93 224.0.0.2 L=28 S=0x00 I=50191 F=0x0000 T=128 > > there's that 224.0.0.* address, which may be unrelated. > > the other address is always a 172.*.*.* number; the addresses > change, but for each 172.*.*.* address there's always four > to twleve hits or so. The 172.146.51.93 resolves to AC92335D.ipt.aol.com and 224.0.0.2 resolves to ALL-ROUTERS.MCAST.NET, so it looks as though something at AOL is broadcasting something to all multicast routers. Cheers, Tom -- Do you guys know what you're doing, or are you just hacking?
Attachment:
pgpS6pIzvrxtw.pgp
Description: PGP signature