interesting multicast packet

Frank Bulk frnkblk at
Thu Feb 27 05:57:07 CET 2014

I suggest using Microsoft Network Monitor
( to identify
the processing sending out that traffic.


-----Original Message-----
From: at
[ at] On Behalf Of
Gert Doering
Sent: Tuesday, February 25, 2014 4:08 AM
To: ipv6-ops at
Subject: interesting multicast packet


my google-fu is failing me, but maybe one of you knows.

After some troubleshooting around a Juniper SSG cluster today, we found
that a windows server on the trust side of the SSG cluster is emitting
UDP packets towards

  ff08::2.8083  (UDP, payload length 21)

ff08::2 = "all routers, organization-scoped"

These packets are sent about every 61 minutes, and caused some interesting
issues here as the *passive* SSG leaked them out towards the router, leading
to "the NSRP MAC address showing up on the wrong switch port", causing short

But that's not what I'm wondering about - I'm more curious about that
sort of packet - what is that?  What is it used for?  Which process is
emitting it, and what is it trying to achieve?

Gert Doering
        -- NetMaster
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279

More information about the ipv6-ops mailing list