Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Packets broadcasting every second

244 views
Skip to first unread message

Sam Nguyen

unread,
Jan 31, 2008, 5:39:06 PM1/31/08
to
While debugging some network issues, I tried using tcpdump and found
these packets getting sent every second:

14:15:10.652974 00:11:43:ee:bc:18 (oui Unknown) > Broadcast, ethertype
Unknown (0x886d), length 64:
0x0000: 0001 0001 2a2e 0000 0200 0011 43ee bc17 ....*.......C...
0x0010: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0020: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030: 0000 ..
14:15:10.652977 00:11:43:ee:bc:17 (oui Unknown) > Broadcast, ethertype
Unknown (0x886d), length 64:
0x0000: 0001 0001 2a2e 0000 0100 0011 43ee bc17 ....*.......C...
0x0010: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0020: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030: 0000 ..

I found out that the MAC 00:11:43:ee:bc:17 belongs to my Windows SBS
2003 server (it is actually 2 NICs bonded into 1). Can anyone tell me
what these packets are and if they could be slowing down my network?

Nilesh

unread,
Feb 11, 2008, 1:02:19 AM2/11/08
to

which os you are using please upgrade the lan drivers or check whether
your Routing & remote access service is disable or not

noah davids

unread,
Feb 13, 2008, 10:01:39 PM2/13/08
to
The 886d type indicates that this is an Intel ANS probe, you indicated that
server has 2 bonded NICs so this makes sense - assuming the NICs are from
Intel or you are at least using Intel's PROSet to create the team. There is
an option to change the broadcast to multicast and to change the probe
period. You can turn it off entirely but that can effect the team's ability
to recover if one card goes down.

Take a look at http://www.intel.com/support/network/sb/cs-009744.htm or just
go to www.intel.com and search for "ANS Probe"

"Nilesh" <nilesh...@gmail.com> wrote in message
news:95c5c878-d743-461e...@v67g2000hse.googlegroups.com...

Sam Nguyen

unread,
Feb 20, 2008, 1:08:02 AM2/20/08
to
On Feb 13, 7:01 pm, "noah davids" <nd...@cox.net> wrote:
> The 886d type indicates that this is an Intel ANS probe, you indicated that
> server has 2 bonded NICs so this makes sense - assuming the NICs are from
> Intel or you are at least using Intel's PROSet to create the team. There is
> an option to change the broadcast to multicast and to change the probe
> period. You can turn it off entirely but that can effect the team's ability
> to recover if one card goes down.
>
> Take a look athttp://www.intel.com/support/network/sb/cs-009744.htmor just
> go towww.intel.comand search for "ANS Probe"

Thanks Noah!

0 new messages