Identifying MAC address 02:01:00:00:00:00

[Guest_imported]

When I run sniffer on my network I see a lot of broadcast messages with the source address 02:01:00:00:00:00 and the destination all Fs. The frame has only MAC layer header and 1496 bytes of data. Any clues who/what is sending these broadcasts? Thanks.

 

[njang]

Did you find the problem of this mac address yet?
I am having the exact problem and it is causing a constant 30K stream of traffic on my network!

 

[njang]

ok I found out this mac address it belongs to a program called black ice (version unknown) this mac will broadcast atleast twice a second causing an additional 20-30k traffic/s on the network. Is this also your conclusion?

-Nathan-

 

[njang]

sorry its not black ice its "zone alarm" software... my bad

 

[Guest_imported]

Hello, njang. Did you figure out which version of ZoneAlarm is running?