CommView (packet Analyzer) and ip address 169.254.x.x

I tried to use commview v5 , I disbaled wired card and I used wireless card, i found this ip address as Local 169.254.242.9 (windows default) and this ip address as Remote: 38.101.111.18

1- Why this ip address 169.254.242.9 ( assigned by windows to diconnected nic ) communicated with the 38.101.111.18 ?


2- Why there are two colors under "Packet" Tab,,,blue and purple ?

see the link below
http://img131.imageshack.us/img131/338/commview6kp.jpg

This is not what i am looking for, I am aware of this ip address why it has been assigned to the disconnected NIC. But my query why does this disconnected ip address communicate with real public ip address ????(Can you imagine that diconnected ip address talk to live ip address??), therefore all my threads that you have posted did not answer my question, therefore I posted my thread here

Thanks hubbardt

You meant : "Are you sure there is not actually any traffic,,,,,,,,,,,,did not you ? If this the case, a cable unplugged from the NIC, then I can say definitely I am sure that there is no traffic.

I will repeat the experiment again and I will record all these informations

Cocuments and SettingsAdministrator>netstat -r

[code:1:59d1cade3f]
IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10004 ...00 12 44 3b e6 24 ...... Ethernet Integrated Controller
0x20003 ...00 91 4c 89 9c d2 ...... Wireless Mini-PCI Card

===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
I omitted some of them ------------
-------------------------------------------------------------
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
169.254.0.0 255.255.0.0 169.254.242.9 169.254.242.9 10
169.254.242.9 255.255.255.255 127.0.0.1 127.0.0.1 10
169.254.255.255 255.255.255.255 169.254.242.9 169.254.242.9 10
224.0.0.0 240.0.0.0 10.71.0.107 10.71.0.107 25
224.0.0.0 240.0.0.0 169.254.242.9 169.254.242.9 10
255.255.255.255 255.255.255.255 10.71.0.107 10.71.0.107 1
255.255.255.255 255.255.255.255 169.254.242.9 169.254.242.9 1
Default Gateway: 10.71.0.1
===========================================================================
Persistent Routes:
None
[/code:1:59d1cade3f]

Cocuments and SettingsAdministrator.NICEDELL>netstat -a

[code:1:59d1cade3f]
Active Connections

Proto Local Address Foreign Address State
TCP IBMP408:http IBMP408:0 LISTENING
TCP IBMP408:epmap IBMP408:0 LISTENING
TCP IBMP408:microsoft-ds IBMP408:0 LISTENING
TCP IBMP408:1025 IBMP408:0 LISTENING
TCP IBMP408:1028 IBMP408:0 LISTENING
TCP IBMP408:3389 IBMP408:0 LISTENING
TCP IBMP408:4347 IBMP408:0 LISTENING
TCP IBMP408:8847 IBMP408:0 LISTENING
TCP IBMP408:netbios-ssn IBMP408:0 LISTENING
TCP IBMP408:1839 tgforumz.tomshardware.com:http ESTABLISHED
TCP IBMP408:1841 64.233.163.99:http ESTABLISHED
TCP IBMP408:1842 tgforumz.tomshardware.com:http ESTABLISHED
TCP IBMP408:1844 205.147.84.35:http ESTABLISHED
TCP IBMP408:1845 tomshardware.com:http ESTABLISHED
TCP IBMP408:1030 IBMP408:0 LISTENING
TCP IBMP408:netbios-ssn IBMP408:0 LISTENING
TCP IBMP408:1070 IBMP408:0 LISTENING
UDP IBMP408:microsoft-ds *:*
UDP IBMP408:isakmp *:*
UDP IBMP408:1029 *:*
UDP IBMP408:1034 *:*
UDP IBMP408:1060 *:*
UDP IBMP408:1064 *:*
UDP IBMP408:1415 *:*
UDP IBMP408:4347 *:*
UDP IBMP408:4500 *:*
UDP IBMP408:ntp *:*
UDP IBMP408:netbios-ns *:*
UDP IBMP408:netbios-dgm *:*
UDP IBMP408:ntp *:*
UDP IBMP408:1619 *:*
UDP IBMP408:1652 *:*
UDP IBMP408:1660 *:*
UDP IBMP408:1714 *:*
UDP IBMP408:ntp *:*
UDP IBMP408:netbios-ns *:*
UDP IBMP408:netbios-dgm *:*
[/code:1:59d1cade3f]

Hi hubbardt

Now my concern is :

wired card that I have got in unplugged form cable,,,ok ?

This wired card (unplugged form cable) has been assigned default ip address form windows,,,,do you agree ?

Can unplugged NIC card (athough it has been assigned ip address ) communicate with public ip address ( I do not care if it is direct communication or indirect communication) ?

Note: When I repeated the experiment , I did not use the same web page that I had accessed before, therefore as a result you we are not going to see the same output from "route -print" command


I hope you get what is my concern.

Thanks

Thanks hubbardt

For this reason I raised my thread, why CommView shows me this communication ?!!

This is what the logical should be.

I would not either, but CommView showed me the communication with public IP this confused me

Sorry for late reply, but I have not received an email notification for your reply.

While I am doing normal check i found your reply.

I will I will see.