127.x.x.x is a network that is reserved for TCP/IP loopback connections. Now as to the connection for port 6646: do you have any other computers on your network? What about wireless routers/access points? Why I am asking is that 192.168.1.66 is a private address according to RFC 1918. Overall, I am noticing something similar -- where network manager reaches out to other machines on the network that have some version of McAfee on them, and I am thinking at this point that this is normal behavior for Network Manager
hey thanks for the reply... connected to my network is my pc and my dad and brothers. we all have mcafee and their computers show up as NAME PC and if i click them i get info about there service pack and security... the other IP is simply that, with no info at all....
we are using bt broadband with a wireless hub that is security enabled and nobody could guess the password.... ive noticed by checking on my dad and my brothers network manager that the unknown IP is only showing up on my network manager.
we havent got any devices that could connect to it like sky tv or anything, so i just dont understand it...
maby im just being paranoid about it all, but you read so much stuff about trojans and viruses and things like that i just dont want to take any chances.
The scary part is we have done exactly what I wanted to do with my other post: we have elimiated the possibility that it is another computer connected to the network. Out of academic interest, could you try pinging/tracrouting to the mystery IP and post the results?
ive used the mcafee traffic monitor thing to try and trace the IP it says the address is reserved for private and is untraceable.
i tried to cut and paste the other bit of info it gave me, but it wouldnt let me do it. i noticed this was in the nameserver bit of the info blackhole-1.iana.org
1 of 1 people found this helpful
How about when you try via the command prompt (start -> run -> cmd)?
hi, sorry about the late reply. ive been working out how to do the traceroute thing lol...
i did as you said and typed tracert followed by the number and it come back as my dads pc.... atleast thats made me feel better, i still arent sure why his is showing up twice in network manager though, one as named pc and the other as just IP.... but atleast i know the problem lies with his pc and not mine...
thankyou sooo much for your help.... i think im goin to stop reading so much about cyber baddies because its making me fear the worst all the time lol.
You are welcome. As to why it shows up twice in your network, I figure that is a better question for McAfee's engineers. (here's hoping a mod or a McAfee egghead can provide an answer to why it shows twice)
hey i just had a little mess about with my dads pc. deleted a whole load of temp files, cookies, cache, things like that.... did the old disc clean up and now the IP has vanished from the network manager, it just got his named pc on there.
so hopefully this has now been solved... thanks very much for the time and assistance...
MRoutt was correct: this is standard behaviour for McAfee Network Agent - it sends out packets using TCP port 6646 trying to discover other systems on the local network.So this is legitimate traffic, so you don't have to worry about it.However, if you simply cannot bear having this traffic on your network, the simple solution is to stop the network agent in services.msc, but I don't recommend it for security reasons.HTH