Strange multicast traffic from 1.0.0.30 - IP is in Australia
Can I anybody expain why I'm seeing this in my firewall log (being blocked), its an Edgerouter with a firewall rule to only accept DHCP\DNS and drop as default from WLAN VLAN30 on a switch0.30, the first part of the EAP225V3 EU MAC address is highlighted but the remainder IS NOT the same MAC
[WLANV30_LOCAL-default-D]IN=switch0.30 OUT= MAC=01:00:5e:00:00:01:b0:be:76:7b:eb:a6:08:00:46:00:00:20 SRC=1.0.0.30 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=3504 PROTO=2
Looking up that IP 1.0.0.30 it is registed with (surprise) Oceania, S Aussieland, Adelaide.