What is this "Thing" on my network?

All perfectly normal to see in a modern network. They are all IPv4 multicast addresses. Here's a brief breakdown and you can read up in depth on your own:

224.0.0.22 - IGMP - http://en.wikipedia.org/wiki/224.0.0.22

224.0.0.252 - LLMNR - http://en.wikipedia.org/wiki/Link-local_Multicast_Name_Resolution

239.255.255.250 - SSDP - http://en.wikipedia.org/wiki/Simple_Service_Discovery_Protocol


Those are multicast addresses. Multicast addresses are used when a single packet is intended to be sent to multiple recipients. Refer to http://www.iana.org/assignments/multicast-addresses/ for a list of service what each address typically corresponds to.


all look like multicast packets to me;

  • 224.0.0.22 - IGMP [ maybe you have some multicast-enabled media player ].
  • 224.0.0.252 - Link-local Multicast Name Resolution
  • 239.255.255.250 - upnp - can be your router or client machine.

Tags:

Ip Address

Recent Posts