As others have said, this is a multicast address, used to send a 'broadcast' to other interested parties on the local network. The main difference between 'multicast' and 'broadcast' is that in broadcast all parties receive it, and in multicast only interested parties receive it. It's more complicated and convoluted than that. It's generally not going to leave your local ethernet segment, although certain routers can be configured to forward multicast packets.
It looks like CIP sync uses multicast, and probably other protocols in the Ethernet/IP suite. So I'm guessing it's just one of the enabled protocols on the ethernet side of the VFD. On Mon, Nov 30, 2020 at 12:43 PM Jaime Solorza <[email protected]> wrote: > Running wireshark on a SCADA network and I am detecting a VFD using CIP > trying to hit IP 239.192.128.229... > I tried looking it up ....says Asis Pacific... > Can someone give me more information on this IP? > Thanks > -- > AF mailing list > [email protected] > http://af.afmug.com/mailman/listinfo/af_af.afmug.com > -- - Forrest
-- AF mailing list [email protected] http://af.afmug.com/mailman/listinfo/af_af.afmug.com
