Wireshark, Fragmented IP protocol, multicasting results?
Posted on 2007-03-29
I'm new to Wireshark, and still trying to learn how to interpret results. What kind of traffic is this:
Source IP is from one of our servers, and is in a private range
Destination is a 239.x.x.x address, which I understand is multicast
Protocols are UDP source port 1048 destination port 850x, and IP with each listed as "Fragmented IP Protocol" and then some more info in (xxxx)
UDP is highlighted in light blue
IP is not highlighted and appears to be almost grayed out, real faint
This sever is used for our phone system, which is Altigen.
So what does the traffic mean, and why would our phone system be multicasting?