Hello all,

So I fired up two virtual machines (using VirtualBox), one Win7, the other Kali. I first started Wireshark on the Win7 box, set the capture filter to only capture traffic from Kali (using a MAC filter), then kicked up Kali. During the boot process, I'm seeing several packets marked as "Multicast Listener Report Message v2", "Neighbor Solicitation for xx:xx:xx:xx:xx", and "Router solicitation from xx:xx:xx:xx:xx". From my brief research of the RFC of MLDv2, the traffic appears to be generated by a host/service acting as an IPv6 router. Running the command:

Code:
netstat -tunlp |grep p6 |wc -l
Returns 0, indicating there are no IPv6-aware processes running.

My question is, what services on Kali would be the cause of this traffic?

Aside from simply knowing before hand through experience, is there a method I could employ to track down which services generate network traffic?

Thank you all in advance!