Clients Mulitcasting to 229.55.150.208

[Jpeanut]

While sniffing our network, I discovered several workstations sending multicast traffic to 229.55.150.208. This address does not resolve and is inactive (no replies). A Whois on it shows that it is in the IANA range for "Special Purpose" use.

We think it may have been a Webcast address, or something similar, used at one time by the clients. But why would they continue to send packets to this address when there is no reply.

Does anyone have any ideas? Thanks ahead.

 

[Piloria]

the only reference i can find regarding this is that it is linked to norton ghost

http://service4.symantec.com/SUPPORT/ghost.nsf/docid/1999033015222425

 

[Jpeanut]

Yes. I ended up finding another article referencing the same thing, and I found out that Ghost was installed on all these machines. What a great little program they created (sarcasm)!#$@

Thanks for your response.