23.10.2018 23:53, Carlos E. R. пишет:
On 23/10/2018 10.58, Carlos E. R. wrote:
On 23/10/2018 06.56, Andrei Borzenkov wrote:
...
Destination MAC and IP are for mDNS (Avahi), but mDNS is using UDP and here PROTO=2 == IGMP. It does not match. It would be interesting to see full packet trace.
Ok, I'll do that this night.
I just did, got a capture, uploaded to susepaste:
cer@Legolas:~> susepaste -n "Carlos E.R." -t "ethereal capture, multicast" -e 10080 /tmp/multicast.pcapng Pasted as: http://susepaste.org/60313875 http://paste.opensuse.org/60313875 Link is also in your clipboard. cer@Legolas:~>
But the download of that is zero bytes. Some sugestion to upload it? Or can I just email it to you, or anybody that wants it? It is just 18KB, I could attach to the mail list, not that big.
This machine is responding to the multicast. IGMPV2 Membership report group 224.0.0.251- I think that the printer is also responding.
Right. IGMP can be sent both to all hosts (224.0.0.1) as well as to specific multicast group. Thank you.
And another more interesting response:
16 39.835966537 192.168.1.133 224.0.0.251 MDNS 204 Standard query 0x0000 PTR _nfs._tcp.local, "QM" question PTR _ftp._tcp.local, "QM" question PTR _webdav._tcp.local, "QM" question PTR _webdavs._tcp.local, "QM" question PTR _sftp-ssh._tcp.local, "QM" question PTR _smb._tcp.local, "QM" question PTR _afpovertcp._tcp.local, "QM" question PTR LEGOLAS._smb._tcp.local PTR Legolas._sftp-ssh._tcp.local
Also on IPv6, from another machine, I think:
13 36.383238110 fe80::f034:b90c:d529:7757 ff02::fb MDNS 270 Standard query 0x0000 PTR _nfs._tcp.local, "QM" question PTR _ftp._tcp.local, "QM" question PTR _webdav._tcp.local, "QM" question PTR _webdavs._tcp.local, "QM" question PTR _sftp-ssh._tcp.local, "QM" question PTR _smb._tcp.local, "QM" question PTR _afpovertcp._tcp.local, "QM" question PTR LEGOLAS._smb._tcp.local PTR ISENGARD._smb._tcp.local PTR Legolas._sftp-ssh._tcp.local PTR Isengard._sftp-ssh._tcp.local