What is this? "WAN 10.245.1.169->224.0.0.1 IGMP"

Dakhor

Getting alot of these…
blocked Source Dest Proto
Jan 4 16:27:39 WAN 10.245.1.169 224.0.0.1 IGMP
Jan 4 16:25:38 WAN 10.245.1.169 224.0.0.1 IGMP
Jan 4 16:24:38 WAN 10.245.1.169 224.0.0.1 IGMP
Jan 4 16:23:38 WAN 10.245.1.169 224.0.0.1 IGMP
Jan 4 16:22:37 WAN 10.245.1.169 224.0.0.1 IGMP
Jan 4 16:21:36 WAN 10.245.1.169 224.0.0.1 IGMP
Jan 4 16:20:36 WAN 10.245.1.169 224.0.0.1 IGMP
Jan 4 16:19:35 WAN 10.245.1.169 224.0.0.1 IGMP
Jan 4 16:18:35 WAN 10.245.1.169 224.0.0.1 IGMP
Jan 4 16:17:35 WAN 10.245.1.169 224.0.0.1 IGMP
Jan 4 16:16:35 WAN 10.245.1.169 224.0.0.1 IGMP

etc etc

getting some of these beeing blocked also and they must be some DHCP thing from my ISP according to dhclient[754]: DHCPREQUEST on xl0 to 255.255.255.255 port 67. But these 0.0.0.0 seem a bit weird to me.

Jan 4 16:41:15 WAN 0.0.0.0:68 255.255.255.255:67 TCP

keeps repeating… but maybe it fails to get the correct ip adress for the log cuz sometimes I get the a simmilar one but with a real ip from my isp.

Jan 4 17:05:43 WAN xxx.xxx.217.179:68 255.255.255.255:67 TCP

Im not very good at this stuff - trying to learn... You guys have any links where I can learn more about reading logs?

/DaK/

sullrich

http://www.networksorcery.com/enp/protocol/igmp.htm