Microsoft network monitor - broadcast messages

Hi,

For some reason, I have executed MS Network monitor v3.1 on one of the
servers...
Then I have seen one strange broadcast message with the Source adress
"[NETWORK ALCHEMY LTD. 02CB7F]" . Protocol name colon contain
"UndescribedFrameData".
I searched the internet and find the software with the same name doing the
network inwentory, asset management and autodetection of all network
material and so on.

I didn't installed such software in my network and would like to know from
which computer the broadcast messages are comming. (There is a lot of
machines on the network to check manually)
Do you have any idea on how to do that?

Many thanks in advance.

Regards,

Adi

Adi,
I guess you would have to use Wireshark to track down the packets.
But is it causing you any problems? Lots of things operate on the network
below the Windows OS security layer. So unless you are controlling access to
your network on the switches you are already allowing anything to attach and
do what it wants on the LAN.
Anthony,
http://www.airdesk.co.uk



"Adi Zebic" <(E-Mail Removed)> wrote in message
news:uPbIgs#(E-Mail Removed)...
> Hi,
>
> For some reason, I have executed MS Network monitor v3.1 on one of the
> servers...
> Then I have seen one strange broadcast message with the Source adress
> "[NETWORK ALCHEMY LTD. 02CB7F]" . Protocol name colon contain
> "UndescribedFrameData".
> I searched the internet and find the software with the same name doing the
> network inwentory, asset management and autodetection of all network
> material and so on.
>
> I didn't installed such software in my network and would like to know from
> which computer the broadcast messages are comming. (There is a lot of
> machines on the network to check manually)
> Do you have any idea on how to do that?
>
> Many thanks in advance.
>
> Regards,
>
> Adi
>
>
>

"Adi Zebic" <(E-Mail Removed)> wrote in message
news:uPbIgs%(E-Mail Removed)...

> For some reason, I have executed MS Network monitor v3.1 on one of the
> servers...

> Then I have seen one strange broadcast message with .........

That is always the first thing that happens when someone runs any sniffer
(NetMonitor, Wireshark, whatever). No one ever dreams that there is so much
"stuff" happening over an Ethernet connection until they do this.

The second thing that happens is that they start seeing imagined hackers &
viruses "under every rock".


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

Hi

I just noticed the same broadcasts on my network. They are coming from an
Avaya IPOffice500 digital/IP phone server that has just been installed on the
network.

It seems to send out a batch of 12 broadcast packets every 20 seconds.
Haven't had time to investigate.

Cheers
Jon

"Adi Zebic" wrote:

> Hi,
>
> For some reason, I have executed MS Network monitor v3.1 on one of the
> servers...
> Then I have seen one strange broadcast message with the Source adress
> "[NETWORK ALCHEMY LTD. 02CB7F]" . Protocol name colon contain
> "UndescribedFrameData".
> I searched the internet and find the software with the same name doing the
> network inwentory, asset management and autodetection of all network
> material and so on.
>
> I didn't installed such software in my network and would like to know from
> which computer the broadcast messages are comming. (There is a lot of
> machines on the network to check manually)
> Do you have any idea on how to do that?
>
> Many thanks in advance.
>
> Regards,
>
> Adi
>
>
>
>