CommView (packet Analyzer) and ip address 169.254.x.x

[zillah]

I tried to use commview v5 , I disbaled wired card and I used wireless card, i found this ip address as Local 169.254.242.9 (windows default) and this ip address as Remote: 38.101.111.18

1- Why this ip address 169.254.242.9 ( assigned by windows to diconnected nic ) communicated with the 38.101.111.18 ?


2- Why there are two colors under "Packet" Tab,,,blue and purple ?

see the link below
http://img131.imageshack.us/img131/338/commview6kp.jpg

 

[hubbardt]

I'm not familiar with this product but the 169.254.x.x I.P address is an address XP assign your network card if it is unable to find a DHCP server to get an address. click me !

Also, maybe one of your other threads yields the answer

Thread 1
Thread 2
Thread 3

 

[zillah]

I'm not familiar with this product but the 169.254.x.x I.P address is an address XP assign your network card if it is unable to find a DHCP server to get an address. click me !

This is not what i am looking for, I am aware of this ip address why it has been assigned to the disconnected NIC. But my query why does this disconnected ip address communicate with real public ip address ????(Can you imagine that diconnected ip address talk to live ip address??), therefore all my threads that you have posted did not answer my question, therefore I posted my thread here

 

[hubbardt]

Are you sure ther is actually any traffic going betwee the interfaces ?

What does your routing table look like ? (ROUTE PRINT)
Take a look at active connections (NETSTAT -a)

Regards,

 

[zillah]

Thanks hubbardt

Are you sure ther is actually any traffic going betwee the interfaces ?

You meant : "Are you sure there is not actually any traffic,,,,,,,,,,,,did not you ? If this the case, a cable unplugged from the NIC, then I can say definitely I am sure that there is no traffic.

What does your routing table look like ? (ROUTE PRINT)
Take a look at active connections (NETSTAT -a)

I will repeat the experiment again and I will record all these informations

 

[zillah]

I will let you know soon

 

[zillah]

Cocuments and SettingsAdministrator>netstat -r

[code:1:59d1cade3f]
IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10004 ...00 12 44 3b e6 24 ...... Ethernet Integrated Controller
0x20003 ...00 91 4c 89 9c d2 ...... Wireless Mini-PCI Card

===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
I omitted some of them ------------
-------------------------------------------------------------
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
169.254.0.0 255.255.0.0 169.254.242.9 169.254.242.9 10
169.254.242.9 255.255.255.255 127.0.0.1 127.0.0.1 10
169.254.255.255 255.255.255.255 169.254.242.9 169.254.242.9 10
224.0.0.0 240.0.0.0 10.71.0.107 10.71.0.107 25
224.0.0.0 240.0.0.0 169.254.242.9 169.254.242.9 10
255.255.255.255 255.255.255.255 10.71.0.107 10.71.0.107 1
255.255.255.255 255.255.255.255 169.254.242.9 169.254.242.9 1
Default Gateway: 10.71.0.1
===========================================================================
Persistent Routes:
None
[/code:1:59d1cade3f]

Cocuments and SettingsAdministrator.NICEDELL>netstat -a

[code:1:59d1cade3f]
Active Connections

Proto Local Address Foreign Address State
TCP IBMP408:http IBMP408:0 LISTENING
TCP IBMP408:epmap IBMP408:0 LISTENING
TCP IBMP408:microsoft-ds IBMP408:0 LISTENING
TCP IBMP408:1025 IBMP408:0 LISTENING
TCP IBMP408:1028 IBMP408:0 LISTENING
TCP IBMP408:3389 IBMP408:0 LISTENING
TCP IBMP408:4347 IBMP408:0 LISTENING
TCP IBMP408:8847 IBMP408:0 LISTENING
TCP IBMP408:netbios-ssn IBMP408:0 LISTENING
TCP IBMP408:1839 tgforumz.tomshardware.com:http ESTABLISHED
TCP IBMP408:1841 64.233.163.99:http ESTABLISHED
TCP IBMP408:1842 tgforumz.tomshardware.com:http ESTABLISHED
TCP IBMP408:1844 205.147.84.35:http ESTABLISHED
TCP IBMP408:1845 tomshardware.com:http ESTABLISHED
TCP IBMP408:1030 IBMP408:0 LISTENING
TCP IBMP408:netbios-ssn IBMP408:0 LISTENING
TCP IBMP408:1070 IBMP408:0 LISTENING
UDP IBMP408:microsoft-ds *:*
UDP IBMP408:isakmp *:*
UDP IBMP408:1029 *:*
UDP IBMP408:1034 *:*
UDP IBMP408:1060 *:*
UDP IBMP408:1064 *:*
UDP IBMP408:1415 *:*
UDP IBMP408:4347 *:*
UDP IBMP408:4500 *:*
UDP IBMP408:ntp *:*
UDP IBMP408:netbios-ns *:*
UDP IBMP408:netbios-dgm *:*
UDP IBMP408:ntp *:*
UDP IBMP408:1619 *:*
UDP IBMP408:1652 *:*
UDP IBMP408:1660 *:*
UDP IBMP408:1714 *:*
UDP IBMP408:ntp *:*
UDP IBMP408:netbios-ns *:*
UDP IBMP408:netbios-dgm *:*
[/code:1:59d1cade3f]

 

[hubbardt]

Hi,

Your routing table shows no routes to the 38.101.111.x network so you will not be directly communicating with this address.

Also, I made a typo NETSTAT -N will show you addresses and port number that you are communicating with.

 

[zillah]

Hi hubbardt

Your routing table shows no routes to the 38.101.111.x network so you will not be directly communicating with this address.

Now my concern is :

wired card that I have got in unplugged form cable,,,ok ?

This wired card (unplugged form cable) has been assigned default ip address form windows,,,,do you agree ?

Can unplugged NIC card (athough it has been assigned ip address ) communicate with public ip address ( I do not care if it is direct communication or indirect communication) ?

Note: When I repeated the experiment , I did not use the same web page that I had accessed before, therefore as a result you we are not going to see the same output from "route -print" command


I hope you get what is my concern.

Thanks

 

[hubbardt]

Can unplugged NIC card (athough it has been assigned ip address ) communicate with public ip address

If your card is unplugged then it cannot communicate at all ....

 

[zillah]

Thanks hubbardt

If your card is unplugged then it cannot communicate at all ....

For this reason I raised my thread, why CommView shows me this communication ?!!

 

[hubbardt]

Hmmmmm ....

I don't know the Commwin product but if a card is unplugged then no traffic can flow. I wouldn't be worried over this.

 

[zillah]

I don't know the Commwin product but if a card is unplugged then no traffic can flow.

This is what the logical should be.

I wouldn't be worried over this.

I would not either, but CommView showed me the communication with public IP this confused me

 

[hubbardt]

Try using PERFMON to monitor the network interface for any traffic to satisfy yourself it is "dead"

Use the 'Network Interface' performance object .....

 

[zillah]

Try using PERFMON to monitor the network interface for any traffic to satisfy yourself it is "dead"

Use the 'Network Interface' performance object .....

Sorry for late reply, but I have not received an email notification for your reply.

While I am doing normal check i found your reply.

I will I will see.

 

[hubbardt]

No problem mate