x264 is attempting to connect to the internet

[ChronoCross]

Parent Process : C:\Documents and Settings\ChronoCross\My Documents\My Downloads\Encoding Tools\MeGUI\megui.exe
Parent Version : 1.0.2122.39518
Parent Description :
Parent Process ID : 0x8C4 (Heximal) 2244 (Decimal)


File Version :
File Description : C:\Documents and Settings\ChronoCross\My Documents\My Downloads\Encoding Tools\MeGUI\x264.v.334\x264.exe
File Path : C:\Documents and Settings\ChronoCross\My Documents\My Downloads\Encoding Tools\MeGUI\x264.v.334\x264.exe
Process ID : 0xCA0 (Heximal) 3232 (Decimal)

Connection origin : local initiated
Protocol : Raw Ethernet
Local Address : 0.0.0.0
Local Port : 0
Remote Name :
Remote Address : 0.0.0.0
Remote Port : 0

Ethernet packet details:
Ethernet II (Packet Length: 56)
Destination: ff-ff-ff-ff-ff-ff
Source: 00-0f-ea-ed-4c-f5
Type: ARP (0x0806)
Address Resolution Protocol (ARP)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: Request
Sender hardware address: 00-0f-ea-ed-4c-f5
Sender IP address: *.*.*.*
Target hardware address: 00-00-00-00-00-00
Target IP address: *.*.*.* (Default Gateway

Binary dump of the packet:
0000: FF FF FF FF FF FF 00 0F : EA ED 4C F5 08 06 00 01 | ..........L.....
0010: 08 00 06 04 00 01 00 0F : EA ED 4C F5 93 7E 2B 4B | ..........L..~+K
0020: 00 00 00 00 00 00 93 7E : 2B 01 A9 7A 8E 8F 50 10 | .......~+..z..P.
0030: FE 9D 53 9B 00 00 51 55 : | ..S...QU


Any ideas why x264 is sending an ARP Packet to my default gateway?

[Sharktooth]

Bull$h!t.

[nm]

I haven't checked the code, but x264 or some library it is using could be trying to find out the local host name (although that would also make a DNS request) or something similar. Just a guess.

[Sharktooth]

yeah... but not the internet! damn crappy firewalls...

[ChronoCross]

lol I told you it was an arp request for dns resolution, possibly of my own hostname. So it's possible what nm said is true. I just found it wierd and since I know jack squat about x264's internals I thought I'd ask

[Shinigami-Sama]

arp resolves mac to IP I think
it's part of my cisco course but I forgot
it has nothing to do with host names...
strange though..

[Sirber]

Might be MeGUI or .NET itself. I don't think x264 is even compiled with socket support...

[movax]

Sounds like .NET just poking its nose everywhere on the system. :)

[CruNcher]

hehe did you know that windows xp update client can even connect to microsoft when you disabled your network card (DSL) it's enough that the cable is pluged in (so much to firewalls) ;) and you won't see any traffic :P i would be more paranoid about such stuff that nobody knows the APIs about like hidden file operations or hidden connections your x264 prob seems to be a programm thats hooking into the process and doing this arp request most probably, could be trillian for example.

[Sharktooth]

however it's the GPAC lib that's linked against ws2_32 (winsock2)...

[Doom9]

MeGUI makes no use of the System.Net namespace, and barring any native code (where I also don't use any network commands, but I have no control over avifile and dgdecode and no access to the sources in the former and never checked the sources in the latter case) that would cause this, without System.Net you can't make any connections whatsoever.