Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm looking at a tcpdump of my network and seeing floods of mdns packets from my W2k3 AD Server. :

03:28:30.655189 IP mydomainserver.local.mdns > 224.0.0.251.mdns: 0*- [0q] 1/0/0 A 192.168.100.1 (40)

Why is it doing this and how can I stop it?

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

This is from installed software (which is a little concerning on a domain controller).

Check through Add/Remove Programs, and get rid of anything that shouldn't be there.

More info on multicast DNS here.

share|improve this answer
1  
As Shane says, this is Bonjour/mDNS. It's doing it because someone installed it, and you stop it by not installing stuff on your domain controllers unless you understand what it does. –  RobM May 17 '11 at 16:19
    
Exactly right. Turned out to be a server product which uses Bonjour. –  Frank Brenner May 30 '11 at 10:39
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.