IGMP V2 Membership Query

Without getting into details at first, just want a broad explanation.
Can someone explain what would cause the following:
Packet capture example:
Source add.     Dest add                
10.10.1.1          239.255.67.250    IGMP   IGMP V2 Membership Query .....

once it starts it wont stop until the core switch (10.10.1.1) is shut off and back on
1.5 Million times in 3 minutes. It chokes the rest of the network and things stop.

Why would it continue non-stop?


LVL 3
MrRudeAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Don JohnstonInstructorCommented:
Half a million packets per minute is a bit much. Do you have a loop in your network somewhere?
0
MrRudeAuthor Commented:
Not that I am aware of. This is a large manufacturing facility and this just pops up at random. We can go along well for weeks and then out of the clear blue - BAM!
Seems to be happening only on days. Nights and weekends never have the issue and production is in full operation. No engineers or office personel nights or weekends. I figured something is being plugged in or triggered somehow, but would like to understand the "Query" better.I assume something triggers the core (which is PIM RP) to query that multicast group. I just can't grasp why it would continue nonstop.
0
Don JohnstonInstructorCommented:
In multicast, when a host wants to receive a stream, it will send out an IGMP join message. The router providing that stream to the network will then begin forwarding the stream onto the network. There can be many hosts receiving the same stream. When one of the hosts receiving a multicast stream leaves the group. That host sends an IGMP leave message.

The router that is providing the stream onto that network segment sends out an IGMP group query (to the multicast address). If there are any remaining devices which are still interested in receiving the stream, they will respond. If nobody responds to the query, the router will stop the multicast stream.

The router only sends one query. So what I think might be happening is that you've got a loop and that query is replicating in the loop. Basically a broadcast storm since broadcast and multicast are handled the same way.

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MrRudeAuthor Commented:
This is the direction I was needing to be pointed in.
Thanks a bunch!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.