WMPLAYER'2' ,Have I anything to worry about, as it wants my firewall to send this...

From: Morph (noseytw_at_aintya)
Date: 12/04/04

  • Next message: Chris Lanier [MVP]: "Re: WMPLAYER'2' ,Have I anything to worry about, as it wants my firewall to send this..." 
    Date: Sat, 4 Dec 2004 21:18:45 -0000

    I have a Sygate firewall and it asked me if it could send out this..
    Does this seem NORMAL to those of you, who know what they are doing,
    Unlike me...and also, I have had many problems with the adress FF-FF-FF-FF
    "It's the WMPLAYER'2' thats freaking me out" , THANK YOU 4 looking at it
    guys !!, hope ya can shed any light, if owt is wrong ?? Cheers again..why 2
    though, i have only seen wmplayer,exe not wmplayer2.exe ?????
    +

    Parent Process : C:\Program Files\Windows Media Player\MPLAYER2.EXE
    Parent Version : 6.4.7.1112
    Parent Description : Windows Media Player
    Parent Process ID : 0xFFF5B44D (Heximal) 4294292557 (Decimal)

    File Version : 6.0.2800.1106
    File Description : Internet Explorer (IEXPLORE.EXE)
    File Path : C:\Program Files\Internet Explorer\IEXPLORE.EXE
    Process ID : 0xFFFA6EA1 (Heximal) 4294602401 (Decimal)

    Connection origin : local initiated
    Protocol : Raw Ethernet
    Local Address : 0.0.0.0
    Local Port : 0
    Remote Name :
    Remote Address : 0.0.0.0
    Remote Port : 0

    Ethernet packet details:
    Ethernet II (Packet Length: 44)
     Destination: ff-ff-ff-ff-ff-ff
     Source: 44-45-53-54-00-00
    Type: ARP (0x0806)
    Address Resolution Protocol (ARP)
     Hardware type: Ethernet (0x0001)
     Protocol type: IP (0x0800)
     Hardware size: 6
     Protocol size: 4
     Opcode: Request
     Sender hardware address: 44-45-53-54-00-00
     Sender IP address: ********
     Target hardware address: 00-00-00-00-00-00
     Target IP address: 64.4.55.109

    Binary dump of the packet:
    0000: FF FF FF FF FF FF 44 45 : 53 54 00 00 08 06 00 01 | ......DEST......
    0010: 08 00 06 04 00 01 44 45 : 53 54 00 00 50 2E 90 3D | ......DEST..P..=
    0020: 00 00 00 00 00 00 40 04 : 37 6D C2 CC | ......@.7m.. 

    ---
Outgoing Mail is AVG VIRUS FREE, checked by AVG 6.0
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.804 / Virus Database: 546 - Release Date: 30/11/2004
  • Next message: Chris Lanier [MVP]: "Re: WMPLAYER'2' ,Have I anything to worry about, as it wants my firewall to send this..."

    Relevant Pages

    • Is this windows media 2 normal , request by firewall
      ... Protocol: Raw Ethernet ... Ethernet II (Packet Length: 44) ... Address Resolution Protocol ... Outgoing Mail is AVG VIRUS FREE, checked by AVG 6.0 Checked by AVG anti-virus system. ...
      (microsoft.public.windowsmedia)
    • Re: Sniffer Cant see cluster traffic
      ... > protocol and cluster specific multicast MAC address, ... > node specific source MAC address. ... > is a multi-cast packet or a directed packet. ... Yep and that is solely at the ethernet packet level. ...
      (comp.os.vms)
    • Re: WMPLAYER2 ,Have I anything to worry about, as it wants my firewall to send this...
      ... >I have a Sygate firewall and it asked me if it could send out this.. ... > Protocol: Raw Ethernet ... > Outgoing Mail is AVG VIRUS FREE, ...
      (microsoft.public.windowsmedia.player)
    • Re: arbitrary packets on an ethernet network
      ... has a very small memory footprint. ... But this environment isn't really good at doing ethernet in general... ... Ethernet headers are used to find out the protocol the packet transports, ...
      (comp.os.linux.embedded)
    • Re: raw ethernet packets
      ... >> What do I need to do to process this packet at destination? ... > you can specify the protocol number when you create the socket. ... The protocol number specifies an *IP* protocol, not an Ethernet ...
      (comp.os.linux.development.system)