This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

conversations statistics - destination 0.0.0.0

0

I am looking at the conversations statistics and I have many conversations from 192.168.1.120 to 0.0.0.0 on port 2001, What kind of traffic is that? I don't think it is multicast. Thx

asked 07 Feb '15, 12:56

jaja's gravatar image

jaja
6446
accept rate: 0%


One Answer:

0

It's an (old school) broadcast address (or uninitialized destination host address) and this port is related to various malicious software. Without even stating if this is UDP, TCP or other transport protocol, there's little more to say.

answered 09 Feb '15, 05:36

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%