Cable Forum - View Single Post - Is this an ntl server that's sending me port 520 packets?

liresa · 26-06-2003, 10:38

Port 520 is for RIP, a protocol used to send routing information around a network. The 224.0.0.9 is the assigned multicast address for RIP-2 packets.
The others look like NTL router addresses - gw may mean gateway, 10.157.95.254 looks like the last address on your network block and so is probably also a router. You can test this by tracerouting to an internet server. e.g. in a Windows command window:

tracert www.ntl.com

The first or second hop, depending on your network setup, may well be the 10.157.95.254

It's nothing to worry about - because NTL's network is so big there are bound to be local differences, be that through slight misconfigurations or differences in network topology requiring different configurations.
The packets are only around 32 bytes long, so don't result in much extra traffic - far more is used by the ARP noise present on the network.

26-06-2003, 10:38	#3
liresa Inactive Join Date: Jun 2003 Posts: 1	Port 520 is for RIP, a protocol used to send routing information around a network. The 224.0.0.9 is the assigned multicast address for RIP-2 packets. The others look like NTL router addresses - gw may mean gateway, 10.157.95.254 looks like the last address on your network block and so is probably also a router. You can test this by tracerouting to an internet server. e.g. in a Windows command window: tracert www.ntl.com The first or second hop, depending on your network setup, may well be the 10.157.95.254 It's nothing to worry about - because NTL's network is so big there are bound to be local differences, be that through slight misconfigurations or differences in network topology requiring different configurations. The packets are only around 32 bytes long, so don't result in much extra traffic - far more is used by the ARP noise present on the network.