Multicast Flood from a switch ip address???

A week or so ago, the following occured:

Out of the clear blue, we started experiencing network issues. Some of our main switches (4948TG) fiber ports went into err disable mode, WAN router was up and down, etc.

Wireshark captured IGMP coming from a switch (3750) ip address. This switch had nothing plugged into it at the time. Fiber was connected. We disconnected the switch from fiber and wireshark still captured the traffic. Rebooted the 6509E and it stopped. A few days later, we experienced the same from a different switch ip in another closet.

Here is a sample of the wireshark capture. It cames so fast that it just scrolled up the screen as fast as it could.

No.     Time        Source                Destination           Protocol Info
      1 0.000000    155.103.64.92         225.0.0.35            IGMP     V2 Membership Query / Join group 225.0.0.35

Frame 1: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Cisco_d0:8e:c1 (00:18:ba:d0:8e:c1), Dst: IPv4mcast_00:00:23 (01:00:5e:00:00:23)
Internet Protocol, Src: 155.103.64.92 (155.103.64.92), Dst: 225.0.0.35 (225.0.0.35)
Internet Group Management Protocol

Network in a nutshell: 6509E - Fiber Blades - 2 sup 720s-PIM Dense mode-Multicast routing
Closets - 3750's Fiber connected to 6509e
Multiple VLAN's configured., etc

Any ideas?
LVL 3
MrRudeAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

shubhanshu_jaiswalCommented:
Have you configured any special settings on main switche(4948TG) fiber ports. just show me the config for the switch...

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MrRudeAuthor Commented:
Nothing out of the ordinary on the 4948's. They aren't the core switches, the 6509 is. My main question is what would cause multicast from a switch ip? address aliasing?,etc.
shubhanshu_jaiswalCommented:
Switch will not send any kind of multicast..it is some host which is sending multicast and switch is forwarding it...
Rowby Goren Makes an Impact on Screen and Online

Learn about longtime user Rowby Goren and his great contributions to the site. We explore his method for posing questions that are likely to yield a solution, and take a look at how his career transformed from a Hollywood writer to a website entrepreneur.

MrRudeAuthor Commented:
Anyway to determine which host?
MrRudeAuthor Commented:
Lokking at the switch it states "ip multicast-routing distributed" is not configured - IP Mulicast packets will not be forwarded.
MrRudeAuthor Commented:
Not really what I was looking for, but at least shub answered.
shubhanshu_jaiswalCommented:
is your issue resolved....?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Management

From novice to tech pro — start learning today.