It’s probably using multicast to announce and discover other devices.  Kind
of like apple’s bonjour protocol etc.  This is probably normal behavior but
I’d check with the manufacturer to be sure.

You’d be surprised how much multicast is running around without your
knowledge.

-Sean


On Mon, Nov 30, 2020 at 11:43 AM Jaime Solorza <[email protected]>
wrote:

> Running wireshark on a SCADA network and I am detecting a VFD using CIP
> trying to hit IP 239.192.128.229...
> I tried looking it up ....says Asis Pacific...
> Can someone give me more information on this IP?
> Thanks
> --
> AF mailing list
> [email protected]
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
Sean Heskett

ZIRKEL
Internet • WiFi • Phone • TV
970-871-8500 x100 - Office
-- 
AF mailing list
[email protected]
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Reply via email to