Sorry I wasn't looking at the address before.This is the ip multicast address that wins uses for partner discovery. You probably have a wins server on this box
Microsoft BackOffice Capacity Planning Mananger
From: Mike Culver[SMTP:mculver @
Sent: Tuesday, September 26, 1995 2:03 PM
To: firewalls @
Subject: Re: Why is Windows NT sending this packet ? (fwd)
Maybe this is how NT handles browsing in absence of NetBeui?
>>On Sep 26, 2:45pm, Torsten Sturm (CIP 89) wrote:
>>> Subject: Why is Windows NT sending this packet ? (fwd)
>>> Does anyone know why my Windows NT Server v3.5 would be sending packets
>>> Name: MICROSOFT.MCAST.NET
>>> Address: 184.108.40.206
>IP address in the range of 220.127.116.11-18.104.22.168 are multicast address
>with a special attribute. Instead of the destination being a single machine
>it is a group of machines that have made a request to their NIC to receive
>any packets to this address. The most common place you will see this is with
>routers to send updates. Multicasting works the same as broadcasting except
>only the hosts that want to recieve the packets will see them.
>This does not explain why NT is sending request on this address. The only
>thing I can think of would be it is how it handles the concepts of "groups"
>for NetBIOS over TCP/IP.