I am currently testing Norton Personal Firewall for a bunch of my users. (so far so good you guys, I used nmap and a bunch of DoS attacks against it and it held up pretty good) Oh yeah back the point, after instaling it on my home machine (Windows 2000 Advance Server, running DHCP, WINS, etc.. I saw some interesting activity comming from my box. It seems that every half an hour or so WINS.EXE (the WINS Server exucatble) on my box want to send some information to 224.0.1.24. I did an nslookup upon that address and I gotMICROSOFT-DS.MCAST.NET the I did a whois on MCAST.NET and got Internet Assigned Numbers Authority (MCAST-DOM)
4676 Admiralty Way, Suite 330
Marina del Rey, CA 90292
US
Any idea who they are and what they might be doing with WINS on my box?
