Hi. I'm connected via a cable modem and i'm currently running snort. To start lets say that I'm on pc3.provider.net I've picked up traffic from pc1, pc2 and pc3.provider.net. The traffic is to rip2- routers.mcast.net and is listed as a responce on a RIPv2 protocol. When looking at the traffic via ethereal the packet containes around15 IP Addresses. Can anyone tell me why I'm seeing this traffic? regards
