Solved

regarding BROADCAST`

Posted on 2006-06-30
10
566 Views
Last Modified: 2010-03-19
Hi all,

As far i know,broadcasting in a network takes place when the destination address is not known and when the PC is switched ON i.e, when it enters in to the network for the first time and inorder to make its presence to know all the other systems the NIC will broadcast its MAC address.Is this right?

But in our company network ,we r having a central managed switch by which i can observe all the incoming and ougoing traffic.In that the broadcast packets that r being received and transmitted by all the ports are increasing all over the day.Why this is happening?Will the NIC by default broadcasts any packets?If so,why?

As our 200 users are in a single subnet,i am observing that so much of the bandwidth is being consumed for this broadcasting itself .If really broadcasting is the issue,then we will implement VLANs in our network.
0
Comment
Question by:haribabupanchireddy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
  • +2
10 Comments
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17022734
Yes, computers when they come online do a broadcast to find the DHCP server and get an ip address. But other than that broadcasts are used for a lot of other purposes also. In your case it is not advisible to have like 200 computers in a single VLAN, even the manageability wise it is not suggested.

I would suggest you to split them into Vlans and by that your network performance will definitely increase a lot. You can do vlan separation based on a lot of criteria, like based on departments, geographical units or even separate server farms and clients (as simple as that).

So Yes, definitely creating broadcasts will make your life a lot easier.

Cheers,
Rajesh
0
 

Author Comment

by:haribabupanchireddy
ID: 17022741
Hello Sir,

I agree with u.But i would like to know the ways in which broadcast occurs theoritically and practically.
0
 
LVL 16

Expert Comment

by:The--Captain
ID: 17022754
>As far i know,broadcasting in a network takes place when the destination address is not known and when the PC is
>switched ON i.e, when it enters in to the network for the first time and inorder to make its presence to know all the other
>systems the NIC will broadcast its MAC address.Is this right?

Not if you're talking about IP (I think IPX networks are more similar to your description)...

In IP, your netmask determines which hosts you can reach on the local interface - when you try to send a packet to a host  on your network, your machine sends (if its using ethernet) an ethernet broadcast which basically says "Who has IP a.b.c.d?", and the appropriate machine responds with the MAC address of its own ethernet interface.  BTW, this type of broadcast is known as an ARP request.

If you try to send packets beyond your local network, your machine does the same thing, but asks who has the IP of the appropriate router.

Also, poorly designed protocols (ie Netbios, which is what windows typically uses for network browsing/sharing) can generate a lot of broadcast packets.

If any of this is news to you, you should really read some basic networking texts.

Cheers,
-Jon

0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 32

Accepted Solution

by:
rsivanandan earned 50 total points
ID: 17022762
1. DHCP Server
2. Routing Updates for some routing protocols
3. Multicasts
4. Most importantly 'Arp' broadcasts.

Say when a Machine A wants to talk to Machine B, it does a broadcast to find the mac address of machine B. This broadcast is received by all the 200 machines in your network. Now think if you had only 50 machines in a vlan, the bandwidth will be less. Same goes for DHCP as well.

Cheers,
Rajesh
0
 
LVL 17

Expert Comment

by:jburgaard
ID: 17023172
You also have  cache's with MAC-IP relations in it.
This cache will mitigate ARP request's. The cache will not live forever, surely not a day long. Some minutes.
In your managed sw.'s config there must be a value.
You can also show the actual cached entr.'s in the sw.

0
 

Author Comment

by:haribabupanchireddy
ID: 17023715
Thank u all.

But still i am not clear.

For example,consider 10 systems connected to a switch and all the systems are in the ON state.Switchs MAC address table is able to show in which port which systems MAC address is and the aging time for the MAC is 300seconds.I think,if a system is idle for more than 300seconds then the MAC address will be removed from the switches MAC table and if that system again enters in to the network,then through ARP request broadcasting its address will be known.

But when all the systems are continuosly working also i am observing broadcast packets....thats what i am not able to understand...?
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17023817
I believe I answered that in the last post ? It is not just the switch that is involved in the loop.

Cheers,
Rajesh
0
 
LVL 16

Expert Comment

by:The--Captain
ID: 17024634
>But when all the systems are continuosly working also i am observing broadcast packets....thats what i am not able to
>understand...?

Are you running windows on many machines?  As I already said, netbios generates broadcasts as part of it's "normal" operation.

Cheers,
-Jon
0
 
LVL 1

Expert Comment

by:conrad_ray
ID: 17024953
You need to determine what is the bulk of these broadcasts, and if they are sourced evenly by all or by certain machines/servers - we can setup a capture session on a port that is experiencing high broadcasts to determine these with a sniffer. Then determine if the volume of broadcasts is normal for that protocol? If things seem normal and these broadcasts cannot be avoided, we can create more vlans.

For Win2k, if an entry is not used by any outgoing datagram for two minutes, the entry is removed from the ARP cache. Entries that are being referenced ARE removed from the ARP cache after ten minutes. I think the values are lower for XP.

Broadcast suppresion on switches is also a way to minimize broadcasts.

Conrad.
0
 

Author Comment

by:haribabupanchireddy
ID: 17028788
Thanku one and all...for ur valuable explanations,now i understood the concept.
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Ping and real time 48 84
GBIC "Gi0/25 notconnect 1auto auto unknown" 3 56
How to change subnet mask for Fortigate WAN interface 2 40
WSUS Cannot Sync with Microsoft Update 4 30
Let’s list some of the technologies that enable smooth teleworking. 
Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question