Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I open wireshark I could see the packets send by machines other than mine. How could its possible?


8252    99.150192   somoeneip SSDP    NOTIFY * HTTP/1.1 
8253    99.151204   fe8s0::15s34:12c8:2f2132:d99221 ff02::c SSDP    NOTIFY * HTTP/1.1 
8075    96.624367   otherip SSDP    NOTIFY * HTTP/1.1 

Values are modified for privacy

share|improve this question
up vote 6 down vote accepted

Take a peek at those IP addresses. They're within one of the reserved IP address blocks: the multicast block.

multicast is the delivery of a message or information to a group of destination computers simultaneously in a single transmission from the source

The reason you're seeing those packets from other machines is because they're being sent to anyone listening.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.