A week or so ago, the following occured:
Out of the clear blue, we started experiencing network issues. Some of our main switches (4948TG) fiber ports went into err disable mode, WAN router was up and down, etc.
Wireshark captured IGMP coming from a switch (3750) ip address. This switch had nothing plugged into it at the time. Fiber was connected. We disconnected the switch from fiber and wireshark still captured the traffic. Rebooted the 6509E and it stopped. A few days later, we experienced the same from a different switch ip in another closet.
Here is a sample of the wireshark capture. It cames so fast that it just scrolled up the screen as fast as it could.
No. Time Source Destination Protocol Info
1 0.000000 184.108.40.206 220.127.116.11 IGMP V2 Membership Query / Join group 18.104.22.168
Frame 1: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Cisco_d0:8e:c1 (00:18:ba:d0:8e:c1), Dst: IPv4mcast_00:00:23 (01:00:5e:00:00:23)
Internet Protocol, Src: 22.214.171.124 (126.96.36.199), Dst: 188.8.131.52 (184.108.40.206)
Internet Group Management Protocol
Network in a nutshell: 6509E - Fiber Blades - 2 sup 720s-PIM Dense mode-Multicast routing
Closets - 3750's Fiber connected to 6509e
Multiple VLAN's configured., etc