Page 1 of 1

What is this UDP traffic to 230.0.0.1? And how can I block it?

Posted: 2020/12/16 14:23:02
by avi_fcb
My VM is of IP 192.168.3.20 in the network of 192.168.3.0/24. While running iptraf command on my machine, I am getting the response as shown below. I can't understand what kind of traffic is this from another server(192.168.3.4) on this network. Also, I want to block it. Can anyone help?

UDP (212 bytes) 192.168.3.4:n1-fwp to 230.0.0.1:n1-fwp (src HWaddr XX.XX.XX.XX.XX.XX) on ensXXX

Re: What is this UDP traffic to 230.0.0.1? And how can I block it?

Posted: 2020/12/16 22:50:43
by jlehtone
230.0.0.1 is within 224.0.0.0/4

https://en.wikipedia.org/wiki/IPv4#Spec ... _addresses
"224.0.0.0/4 (224.0.0.0–-239.255.255.255) In use for IP multicast."


Do you have currently firewall rule that allows incoming multicast? If not, then your machine has initiated the multicast connection.