mDNS Packet storm help
mDNS Packet storm help
- Subject: mDNS Packet storm help
- From: Eric Dahlman <email@hidden>
- Date: Thu, 29 Sep 2005 20:19:17 -0500
Howdy,
In trying to track down another problem I have noticed that there is
a huge amount of mdns generated by my machine. This is on the order
of 1400 packets a second, that is kind of much I assume. I have
included the details on one of these packets below. My machine is on
a private net with IP 192.168.172.13 and the other machine (steinbit)
is on the other side of a nat with a internet visible IP 204.72.xx.xx
(to protect the innocent).
If it matters my machine is a laptop that regularly moves between two
different private networks natted to the internet (work and home).
I would appreciate any idea about what is going on an what I can do
to stop it.
Thanks,
-Eric
P.S. Both machines are running Tiger with the latest updates.
No. Time Source Destination
Protocol Info
4 0.001356 192.168.172.1 224.0.0.251
MDNS Standard query response PTR steinbit._afpovertcp._tcp.local
Frame 4 (191 bytes on wire, 191 bytes captured)
Ethernet II, Src: Cisco-Li_20:09:1e (00:0f:66:20:09:1e), Dst:
01:00:5e:00:00:fb (01:00:5e:00:00:fb)
Internet Protocol, Src: 192.168.172.1 (192.168.172.1), Dst:
224.0.0.251 (224.0.0.251)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP;
ECN: 0x00)
Total Length: 173
Identification: 0xa2a7 (41639)
Flags: 0x00
Fragment offset: 0
Time to live: 254
Protocol: UDP (0x11)
Header checksum: 0xcbda [correct]
Source: 192.168.172.1 (192.168.172.1)
Destination: 224.0.0.251 (224.0.0.251)
User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353)
Source port: mdns (5353)
Destination port: mdns (5353)
Length: 153
Checksum: 0x0000 (none)
Domain Name System (response)
Transaction ID: 0x0000
Flags: 0x8400 (Standard query response, No error)
Questions: 0
Answer RRs: 1
Authority RRs: 0
Additional RRs: 4
Answers
_afpovertcp._tcp.local: type PTR, class IN,
steinbit._afpovertcp._tcp.local
Name: _afpovertcp._tcp.local
Type: PTR (Domain name pointer)
Class: IN (0x0001)
Time to live: 1 hour, 15 minutes
Data length: 11
Domain name: steinbit._afpovertcp._tcp.local
Additional records
steinbit-2.local: type AAAA, class FLUSH, addr fe80::20d:
93ff:fe65:a43e
Name: steinbit-2.local
Type: AAAA (IPv6 address)
Class: FLUSH (0x8001)
Time to live: 2 minutes
Data length: 16
Addr: fe80::20d:93ff:fe65:a43e
steinbit-2.local: type A, class FLUSH, addr 204.72.172.188
Name: steinbit-2.local
Type: A (Host address)
Class: FLUSH (0x8001)
Time to live: 2 minutes
Data length: 4
Addr: 204.72.172.188
steinbit._afpovertcp._tcp.local: type SRV, class FLUSH,
priority 0, weight 0, port 548, target steinbit-2.local
Name: steinbit._afpovertcp._tcp.local
Type: SRV (Service location)
Class: FLUSH (0x8001)
Time to live: 2 minutes
Data length: 8
Priority: 0
Weight: 0
Port: 548
Target: steinbit-2.local
steinbit._afpovertcp._tcp.local: type TXT, class FLUSH
Name: steinbit._afpovertcp._tcp.local
Type: TXT (Text strings)
Class: FLUSH (0x8001)
Time to live: 1 hour, 15 minutes
Data length: 1
Text:
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden