I have a small LAN comprising a Windows 7 Ultimate x64 PC, 2 Windows XP Pro x86 PCs and an Asus router.The Win 7 box has IPv6 enabled. There are no other IPv6 enabled devices on the LAN.

In my firewall I see numerous requests originating from the Windows 7 PC, which are for the Multicast address ff02::1:ff, which is a Solicited-Node address query and has a scope of 2 which equates to the local link.

As far as I knew local link addresses are filtered by routers, hence local link. Given that situation I'm wondering why I'm seeing these queries being generated to various addresses?

Any ideas?

link|improve this question

25% accept rate
If they sold you an x54 machine, you should take it back to the store ;-) – Daniel Beck Dec 30 '10 at 13:31
edited to correct typo – aking1012 Dec 30 '10 at 14:49
Can't beat those x54s, they're beasts ;-) – Pulse Dec 31 '10 at 6:06
When you say "In my firewall I see..." where in your network is the firewall? – Spiff Jun 27 '11 at 0:42
feedback

1 Answer

troubleshoot...go to another port on the router with wireshark and see if you can find the requests...often consumer grade "routers" have an integrated four port switch that acts like a dumb switch plugged into a single "router" port and a wan port.

link|improve this answer
meaning that the LAN ports are switched not routed – aking1012 Dec 30 '10 at 17:00
Thanks for the suggestion. I've been doing some analysis with Wireshark but I'm still none the wiser. The router is running custom firmware, which does a pretty good job of differentiating the port characteristics. I'll keep looking... – Pulse Dec 31 '10 at 6:09
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.