Great Circle Associates Firewalls
(September 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Why is Windows NT sending this pack
From: pnh1rgr @ mclo10 . med . navy . mil (Bob Resino)
Organization: Civil Air Patrol National Headquarters
Date: Tue, 26 Sep 1995 18:24:43 -0500
To: cmilam @ cap . au . af . mil (cmilam), lhelber @ targetvision . com (Larry Helber), firewalls @ GreatCircle . COM (firewalls)

Received: from spaatz.nhq.cap.gov by spaatz.nhq.cap.gov
  (PostalUnion/SMTP(tm) v2.1.7 for Windows NT(tm))
  id AA-1995Sep26.181443.0.4878; Tue, 26 Sep 1995 18:14:44 -0500
Received: from Microsoft Mail (PU Serial #0)
  by spaatz.nhq.cap.gov (PostalUnion/SMTP(tm) v2.1.7 for Windows NT(tm))
  id AA-1995Sep26.180300.0.5989; Tue, 26 Sep 1995 18:14:44 -0500
From: pnh1rgr @
 mclo10 .
 med .
 navy .
 mil (Bob Resino)
To: cmilam @
 cap .
 au .
 af .
 mil (cmilam),
   lhelber @
 targetvision .
 com (Larry Helber),
   firewalls @
 GreatCircle .
 COM (firewalls)
Message-ID: <1995Sep26 .
 180300 .
 0 .
 5989 @
 spaatz .
 nhq .
 cap .
 gov>
X-Mailer: Microsoft Mail via PostalUnion/SMTP for Windows NT
Mime-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Organization: Civil Air Patrol National Headquarters
Date: Tue, 26 Sep 1995 18:14:44 -0500
Subject: Re: Why is Windows NT sending this pack

Received: from spaatz.nhq.cap.gov by spaatz.nhq.cap.gov
  (PostalUnion/SMTP(tm) v2.1.7 for Windows NT(tm))
  id AA-1995Sep26.180341.0.4861; Tue, 26 Sep 1995 18:03:41 -0500
Received: from Microsoft Mail (PU Serial #0)
  by spaatz.nhq.cap.gov (PostalUnion/SMTP(tm) v2.1.7 for Windows NT(tm))
  id AA-1995Sep26.175600.0.5964; Tue, 26 Sep 1995 18:03:41 -0500
From: pnh1rgr @
 mclo10 .
 med .
 navy .
 mil (Bob Resino)
To: cmilam @
 cap .
 au .
 af .
 mil ,
   lhelber @
 targetvision .
 com (Larry Helber),
   firewalls @
 GreatCircle .
 COM (firewalls)
Message-ID: <1995Sep26 .
 175600 .
 0 .
 5964 @
 spaatz .
 nhq .
 cap .
 gov>
X-Mailer: Microsoft Mail via PostalUnion/SMTP for Windows NT
Organization: Civil Air Patrol National Headquarters
Date: Tue, 26 Sep 1995 18:03:41 -0500
Subject: Re: Why is Windows NT sending this pack

Received: from relay4.UU.NET by spaatz.nhq.cap.gov
  (PostalUnion/SMTP(tm) v2.1.7 for Windows NT(tm))
  id AA-1995Sep26.175601.0.4855; Tue, 26 Sep 1995 17:56:01 -0500
Received: from miles.greatcircle.com by relay4.UU.NET with ESMTP 
	id QQzixn13282; Tue, 26 Sep 1995 18:57:59 -0400
Received: (majordom @
 localhost) by miles.greatcircle.com (8.6.9/Miles-950430-1)
id NAA13738 for firewalls-outgoing; Tue, 26 Sep 1995 13:16:16 -0700
Received: from mycroft.GreatCircle.COM (mycroft.greatcircle.com
[198.102.244.35]) by miles.greatcircle.com (8.6.9/Miles-950430-1) with ESMTP
id
NAA13730 for <firewalls @
 miles>; Tue, 26 Sep 1995 13:16:13 -0700
Received: from tct10.med.navy.mil by mycroft.GreatCircle.COM
(8.6.10/SMI-4.1/Brent-950602)
	id NAA29551; Tue, 26 Sep 1995 13:07:41 -0700
Received: from mclo11 ([164.167.86.11]) by tct10.med.navy.mil (8.6.9/8.6.9)
with SMTP id PAA14731; Tue, 26 Sep 1995 15:46:26 -0400
Message-Id: <199509261946 .
 PAA14731 @
 tct10 .
 med .
 navy .
 mil>
X-Sender: pnh1rgr @
 mclo10 .
 med .
 navy .
 mil
Date: Tue, 26 Sep 1995 16:08:00 -0400
To: Larry Helber <lhelber @
 targetvision .
 com>, firewalls @
 GreatCircle .
 COM
From: pnh1rgr @
 mclo10 .
 med .
 navy .
 mil (Bob Resino)
Subject: Re: Why is Windows NT sending this packet ? (fwd)
X-Mailer: <Windows Eudora Version 1.4.2b16>
Sender: firewalls-owner @
 GreatCircle .
 COM
Precedence: bulk

At 02:18 PM 9/26/95, Larry Helber wrote:
>
>
>>
>>
>>On Sep 26,  2:45pm, Torsten Sturm (CIP 89) wrote:
>>> Subject: Why is Windows NT sending this packet ? (fwd)
>>>...
>>> Does anyone know why my Windows NT Server v3.5 would be sending packets
to...
>>>
>>>   Name:    MICROSOFT.MCAST.NET
>>>   Address:  224.0.1.24
>>>
>>> I happened upon this with a packet analyzer yesterday.  I am NOT aware of
>>> configuring ANYTHING having to do with "MICROSOFT.MCAST.NET"?
>>
>>     Network 224 is a "special" network.  It really refers to your local
>>network (I think).
>>
>
>IP address in the range of 224.0.0.1-239.255.255.255 are multicast address
>with a special attribute.  Instead of the destination being a single machine
>it is a group of machines that have made a request to their NIC to receive
>any packets to this address. The most common place you will see this is with
>routers to send updates.  Multicasting works the same as broadcasting except
>only the hosts that want to recieve the packets will see them.
>
>This does not explain why NT is sending request on this address.  The only
>thing  I can think of would be it is how it handles the concepts of "groups"
>for NetBIOS over TCP/IP.
>
>
Actually, if you do the command ROUTE PRINT, you will find that WIN NT is a
mutlicast router.  NT is capable of selective routing of IP including
multicast
net 224.  This can be/is (jury is still out) a problem.  Local MBONE and
Multicast is a good thing.  Becoming part of a Wide-area multicast group
could be a problem.  NT really can only route 224 between its own NIC's (I
think).  Normally, you need a UN!X box running mrouted to link multicasts
between networks.
---------------------------------------------------------------
Bob Resino (RGR24) pnh1rgr @
 pnh10 .
 med .
 navy .
 mil (804)398-7400
Healthcare Support Office                 Fax:(804)398-7265
Medical Construction Liaison Department   
Management Information / Data-telecommunciations Div (Code 55)
6500 Hampton Blvd               "To be or not to be...
Norfolk, VA  23707              What was the question ?"  
---------------------------------------------------------------
The opinions are mine, NOT those of the Navy or the Healthcare
Support Office.  If they happen to be the same, its got to be
coincidence!






Follow-Ups:
Indexed By Date Previous: Re: tools to check hidden files
From: rthomas @ pamd . cig . mot . com (Robert Owen Thomas)
Next: Re: tools to check hidden files
From: rthomas @ pamd . cig . mot . com (Robert Owen Thomas)
Indexed By Thread Previous: Re: Why is Windows NT sending this pack
From: pnh1rgr @ mclo10 . med . navy . mil (Bob Resino)
Next: please people be MODERATED!!
From: mustA_heArt <musta @ eve . info . umoncton . ca>

Google
 
Search Internet Search www.greatcircle.com