PDA

View Full Version : fe80::: WTF?


NODPortable
October 14th, 2009, 04:51 AM
Hi,

When I boot up my computer I keep getting an inbound request on some weird address format.

fe80:::d5fc:79a:d2ff:a1dc

Its coming in port 5535 (llmnar or something)

It claims to be the windows host process (on Win 7 x64).

Any idea what the **** it is? So far I've been temporarily blocking it...
I tried an IP lookup but got nothing.

NODPortable
October 14th, 2009, 06:54 AM
Hmmm, not certain but I think its related to the virtual machine that I have. When I delay the boot up of it, the request actually comes when it starts, not my host PC.

Still no idea if its a valid request coming from the virtual pc to my host, or some spam/hack coming from a remote computer to the OS installation on the virtual pc....

Marcos
October 14th, 2009, 07:32 AM
Since you're using Windows 7, make sure to enable pre-release updates in the update setup so that the firewall module 1053 with Windows 7 support is downloaded. It adds an option for multicast address resolution (LLMNR) on port 5355 (you probably made a typo).

NODPortable
October 14th, 2009, 08:00 AM
Yep correct on the typo.

I didn't see any 'pre-release updates' option. I did stumble across an 'Enable Test Mode' option though, so I took a punt and enabled that instead. Its gone ahead and download ~23mb file.

Does that sound about right?

pegas
October 14th, 2009, 08:12 AM
It's OK, let the update finish.