On 23/10/2018 10.58, Carlos E. R. wrote:
On 23/10/2018 06.56, Andrei Borzenkov wrote:
...
Destination MAC and IP are for mDNS (Avahi), but mDNS is using UDP and here PROTO=2 == IGMP. It does not match. It would be interesting to see full packet trace.
Ok, I'll do that this night.
I just did, got a capture, uploaded to susepaste: cer@Legolas:~> susepaste -n "Carlos E.R." -t "ethereal capture, multicast" -e 10080 /tmp/multicast.pcapng Pasted as: http://susepaste.org/60313875 http://paste.opensuse.org/60313875 Link is also in your clipboard. cer@Legolas:~> But the download of that is zero bytes. Some sugestion to upload it? Or can I just email it to you, or anybody that wants it? It is just 18KB, I could attach to the mail list, not that big. This machine is responding to the multicast. IGMPV2 Membership report group 224.0.0.251- I think that the printer is also responding. And another more interesting response: 16 39.835966537 192.168.1.133 224.0.0.251 MDNS 204 Standard query 0x0000 PTR _nfs._tcp.local, "QM" question PTR _ftp._tcp.local, "QM" question PTR _webdav._tcp.local, "QM" question PTR _webdavs._tcp.local, "QM" question PTR _sftp-ssh._tcp.local, "QM" question PTR _smb._tcp.local, "QM" question PTR _afpovertcp._tcp.local, "QM" question PTR LEGOLAS._smb._tcp.local PTR Legolas._sftp-ssh._tcp.local Also on IPv6, from another machine, I think: 13 36.383238110 fe80::f034:b90c:d529:7757 ff02::fb MDNS 270 Standard query 0x0000 PTR _nfs._tcp.local, "QM" question PTR _ftp._tcp.local, "QM" question PTR _webdav._tcp.local, "QM" question PTR _webdavs._tcp.local, "QM" question PTR _sftp-ssh._tcp.local, "QM" question PTR _smb._tcp.local, "QM" question PTR _afpovertcp._tcp.local, "QM" question PTR LEGOLAS._smb._tcp.local PTR ISENGARD._smb._tcp.local PTR Legolas._sftp-ssh._tcp.local PTR Isengard._sftp-ssh._tcp.local -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.0 (Legolas))