On 05/23/2014 06:17 PM, jdow wrote:
> On 2014/05/23 14:25, ToddAndMargo wrote:
>> On 05/23/2014 02:08 PM, Alan Bartlett wrote:
>>> On 23 May 2014 22:02, ToddAndMargo <[log in to unmask]> wrote:
>>>> Hi All,
>>>>
>>>> Is there some special meaning (like 127.0.0.1.) to
>>>> the following IP address?
>>>>
>>>>      224.0.0.251
>>>>
>>>> Many thanks,
>>>> -T
>>>
>>> It is an IP Multicast address.
>>>
>>> host 224.0.0.251
>>>
>>> will tell you a bit more.
>>>
>>> Alan.
>>>
>>
>> Hi Alan,
>>
>> $ host 224.0.0.251
>> Host 251.0.0.224.in-addr.arpa. not found: 3(NXDOMAIN)
>>
>> Not sure what I am suppose to find.
>>
>> This is why I ask (VLC's doing):
>>
>> kernel: Vlan-out Everything Else IN= OUT=eth0.5 SRC=192.168.254.10
>> DST=224.0.0.251 LEN=56 TOS=0x00 PREC=0x00 TTL=255 ID=0 DF PROTO=UDP
>> SPT=5353
>> DPT=5353 LEN=36
>>
>> eth0.5 is a virtual Ethernet too, not hooked to the Internet.
>>
>> And port 3535 UDP?
>>
>> $ grep -i 3535 /etc/services
>> ms-la           3535/tcp                # MS-LA
>> ms-la           3535/udp                # MS-LA
>>
>>
>> Thank you for the help,
>> -T
>>
> Lysdexic are we? It's 5353 which seems to be an alternate DNS address.
>
> {^_^}   Joanne "me too be lysdexic"
>

Seems I have already look at 5353 once before.  From
one of my penetration reports:

     Port 5353/udp (zeroconf) is registered to the Link
     Local Multicast Name Resolution (LLMNR) service.
     It is part of how Windows computers identify themselves
     to each other on a local area network and is part of
     the normal operation of the Windows XP Operating System.
     Further information can be found at:
          https://en.wikipedia.org/wiki/LLMNR

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Computers are like air conditioners.
They malfunction when you open windows
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~