Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Trying to connect to 224.0.0.22

  • 09-11-2004 11:19pm
    #1
    HelterSkelter
    Closed Accounts Posts: 2,585 ✭✭✭


    I often get a message from my firewall alerting me to processes trying to connect to 224.0.0.22. The process name can vary but it's always the same IP address. What is the IP address for? Should I allow it to connect ?

    Thanks.


    File Version : 1.0.10.6
    File Description : Common Client Windows Account Validation Service (ccPwdSvc.exe)
    File Path : C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    Process ID : 0x944 (Heximal) 2372 (Decimal)

    Connection origin : local initiated

    Ethernet packet details:
    Ethernet II (Packet Length: 68)
    Destination: 01-00-5e-00-00-16
    Source: 00-05-5d-47-e6-fb
    Type: IP (0x0800)
    Internet Protocol
    Version: 4
    Header Length: 24 bytes
    Flags:
    .0.. = Don't fragment: Not set
    ..0. = More fragments: Not set
    Fragment offset:0
    Time to live: 1
    Protocol: 0x2 (IGMP - Internet Group Management Message Protocol)
    Header checksum: 0xf182 (Correct)
    Source: 192.168.1.10
    Destination: 224.0.0.22

    Binary dump of the packet:
    0000: 01 00 5E 00 00 16 00 05 : 5D 47 E6 FB 08 00 46 00 | ..^.....]G....F.
    0010: 00 28 00 16 00 00 01 02 : 82 F1 C0 A8 01 0A E0 00 | .(..............
    0020: 00 16 94 04 00 00 22 00 : EA 03 00 00 00 01 04 00 | ......".........
    0030: 00 00 EF FF FF FA 02 04 : 05 B4 01 01 04 02 41 43 | ..............AC
    0040: 41 43 41 43 : | ACAC


Comments

  • #2
    Snaga
    Registered Users, Registered Users 2 Posts: 1,561 ✭✭✭Snaga


    This is as far as I can tell an IGMP (routing protocol) membership report, kind of like your machine saying 'Im connected to the network!' to your router. The ip address 224.0.0.22 is a multicast address, not a normal IP address, reserved for the IGMP protocol.(http://www.networksorcery.com/enp/protocol/ip/multicast.htm).

    If you look at the "time to live" value, its set to one, so that packet will only ever take one hop away from your machine before expiring (i.e. your router).

    Its totally harmless traffic, your windows machine must have IGMP enabled, that said Im not sure how to disable it :)

    Youve nothing to worry about though.


  • #3
    HelterSkelter
    Closed Accounts Posts: 2,585 ✭✭✭HelterSkelter


    Thanks a lot! Much appreciated.


Advertisement