Is this windows media 2 'normal' , request by firewall

From: Morph (noseytw_at_aintya)
Date: 12/04/04


Date: Sat, 4 Dec 2004 21:16:24 -0000

I have a Sygate firewall and it asked me if it could send out this..
Does this seem NORMAL to those of you, who know what they are doing,
Unlike me...and also, I have had many problems with the adress FF-FF-FF-FF
"It's the WMPLAYER'2' thats freaking me out" , THANK YOU 4 looking at it
guys !!, hope ya can shed any light, if owt is wrong ?? Cheers again..

Parent Process : C:\Program Files\Windows Media Player\MPLAYER2.EXE
Parent Version : 6.4.7.1112
Parent Description : Windows Media Player
Parent Process ID : 0xFFF5B44D (Heximal) 4294292557 (Decimal)

File Version : 6.0.2800.1106
File Description : Internet Explorer (IEXPLORE.EXE)
File Path : C:\Program Files\Internet Explorer\IEXPLORE.EXE
Process ID : 0xFFFA6EA1 (Heximal) 4294602401 (Decimal)

Connection origin : local initiated
Protocol : Raw Ethernet
Local Address : 0.0.0.0
Local Port : 0
Remote Name :
Remote Address : 0.0.0.0
Remote Port : 0

Ethernet packet details:
Ethernet II (Packet Length: 44)
 Destination: ff-ff-ff-ff-ff-ff
 Source: 00-00-53-54-00-00 - i changed a few no.s
Type: ARP (0x0806)
Address Resolution Protocol (ARP)
 Hardware type: Ethernet (0x0001)
 Protocol type: IP (0x0800)
 Hardware size: 6
 Protocol size: 4
 Opcode: Request
 Sender hardware address: 44-45-53-54-00-00
 Sender IP address: ********
 Target hardware address: 00-00-00-00-00-00
 Target IP address: 64.4.55.109

Binary dump of the packet:
0000: FF FF FF FF FF FF 44 45 : 53 54 00 00 08 06 00 01 | ......DEST......
0010: 08 00 06 04 00 01 44 45 : 53 54 00 00 50 2E 90 3D | ......DEST..P..=
0020: 00 00 00 00 00 00 40 04 : 37 6D C2 CC | ......@.7m..

---
Outgoing Mail is AVG VIRUS FREE, checked by AVG 6.0
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.804 / Virus Database: 546 - Release Date: 30/11/2004


Relevant Pages

  • WMPLAYER2 ,Have I anything to worry about, as it wants my firewall to send this...
    ... Protocol: Raw Ethernet ... Ethernet II (Packet Length: 44) ... Address Resolution Protocol ... Outgoing Mail is AVG VIRUS FREE, checked by AVG 6.0 Checked by AVG anti-virus system. ...
    (microsoft.public.windowsmedia.player)
  • Re: Sniffer Cant see cluster traffic
    ... > protocol and cluster specific multicast MAC address, ... > node specific source MAC address. ... > is a multi-cast packet or a directed packet. ... Yep and that is solely at the ethernet packet level. ...
    (comp.os.vms)
  • Re: WMPLAYER2 ,Have I anything to worry about, as it wants my firewall to send this...
    ... >I have a Sygate firewall and it asked me if it could send out this.. ... > Protocol: Raw Ethernet ... > Outgoing Mail is AVG VIRUS FREE, ...
    (microsoft.public.windowsmedia.player)
  • Re: arbitrary packets on an ethernet network
    ... has a very small memory footprint. ... But this environment isn't really good at doing ethernet in general... ... Ethernet headers are used to find out the protocol the packet transports, ...
    (comp.os.linux.embedded)
  • Re: raw ethernet packets
    ... >> What do I need to do to process this packet at destination? ... > you can specify the protocol number when you create the socket. ... The protocol number specifies an *IP* protocol, not an Ethernet ...
    (comp.os.linux.development.system)