Hi, we have a windows 2008 r2 server connected to a hardware firewall. our firewall is blocking the server from sending data packets to 232.108.116.118. We unable to determine what on the server is trying to send to this ip address. it is not an internal ip address. Any help would be great. many thanks.

Hello
You can try the command "netstat / b" on the server that makes you see the application that is communicating with that address if traffic is TCP.

Athos

great idea, thanks i'll give it a try.

Hi Jolley,

The IP address 232.108.116.118 is multicast address, and the firewall may be configured to block multicast address.

In order to view the packets that the server sends to 232.108.116.118, you may use network monitor to perform a network traffic packet.

If you want to download network monitor, you may click the link:

https://www.microsoft.com/en-us/download/details.aspx?id=4865

Reference about how to use network monitor to capture network traffic

https://support.microsoft.com/en-us/kb/812953

Best Regards,

Anne He