RE: msft 169.254.173.250 IP address

Sadiq,

What traffic is being generated from the address? This would be a good
indication whether you need to be concerned or not. Are you running vmware
images on the machine as well?

Regards,
 
Tyson Scott - CCIE #13513 R&S and Security
Technical Instructor - IPexpert, Inc.

Telephone: +1.810.326.1444
Cell: +1.248.504.7309
Fax: +1.810.454.0130
Mailto: tscott_at_ipexpert.com
 

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of ALL
From_NJ
Sent: Wednesday, April 08, 2009 10:10 AM
To: Ryan West
Cc: Sadiq Yakasai; Cisco certification; Cisco certification
Subject: Re: msft 169.254.173.250 IP address

I read your email ... even the last line ;-)

DHCP requests are fairly basic ... broadcast based. Can your machine send a
bcast and or is your network passing these?

For tshooting, assign your pc a static ip and ping a local device. Do you
get an arp response? If so, then bcasts are working fine and this removes
quite a few items from your tshooting check list.

If you think your DHCP server is not serving addresses or your PC is
rejecting them, then this is a diff problem. I believe you said you have
wireshark? This will tell you if your dhcp server or pc is assigning /
rejecting the addresses. If you have a capture, feel free to unicast it to
me as I can look at it with you.

HTH,

Andrew

On Wed, Apr 8, 2009 at 9:40 AM, Ryan West <rwest_at_zyedge.com> wrote:

> IPv4 link-local address. Have you verified there is no malware on the
> machine. I've seen DHCP die because of corrupt LSPs.
>
> -----Original Message-----
> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> Sadiq Yakasai
> Sent: Wednesday, April 08, 2009 9:27 AM
> To: Cisco certification; Cisco certification
> Subject: msft 169.254.173.250 IP address
>
> Hi Guys,
>
> I have done abit of googling but to no avail...but does anyone have any
> information about this IP address on Windows XP please?
>
> The PC is doing DHCP straight away but I am still seeing traffic sourced
> from this IP address on a wireshark trace, which is kinda weird. Appears
to
> me like the PC assigns itself this IP address right before assigning the
IP
> address from the DHCP server.
>
> PS: There is no delay what so ever from the DHCP server and the client
does
> NOT timeout on DHCP.
>
> Thanks in advance,
>
> Sadiq
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Andrew Lee Lissitz
all.from.nj_at_gmail.com
Blogs and organic groups at http://www.ccie.net