locked
Server trying to access unrocognised IP address RRS feed

  • Question

  • Hi, we have a windows 2008 r2 server connected to a hardware firewall. our firewall is blocking the server from sending data packets to 232.108.116.118. We unable to determine what on the server is trying to send to this ip address. it is not an internal ip address. Any help would be great. many thanks.
    Friday, July 24, 2015 4:43 PM

Answers

  • Hi Jolley,

    The IP address 232.108.116.118 is multicast address, and the firewall may be configured to block multicast address.

    In order to view the packets that the server sends to 232.108.116.118, you may use network monitor to perform a network traffic packet.

    If you want to download network monitor, you may click the link:

    https://www.microsoft.com/en-us/download/details.aspx?id=4865

    Reference about how to use network monitor to capture network traffic

    https://support.microsoft.com/en-us/kb/812953

    Best Regards,

    Anne He


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Monday, July 27, 2015 5:09 AM

All replies

  • Hello
    You can try the command "netstat / b" on the server that makes you see the application that is communicating with that address if traffic is TCP.

    Athos

    Friday, July 24, 2015 5:00 PM
  • great idea, thanks i'll give it a try.
    Friday, July 24, 2015 9:04 PM
  • Hi Jolley,

    The IP address 232.108.116.118 is multicast address, and the firewall may be configured to block multicast address.

    In order to view the packets that the server sends to 232.108.116.118, you may use network monitor to perform a network traffic packet.

    If you want to download network monitor, you may click the link:

    https://www.microsoft.com/en-us/download/details.aspx?id=4865

    Reference about how to use network monitor to capture network traffic

    https://support.microsoft.com/en-us/kb/812953

    Best Regards,

    Anne He


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Monday, July 27, 2015 5:09 AM