Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

IGMP V2 Membership Query

Posted on 2011-02-25
4
Medium Priority
?
1,112 Views
Last Modified: 2012-05-11
Without getting into details at first, just want a broad explanation.
Can someone explain what would cause the following:
Packet capture example:
Source add.     Dest add                
10.10.1.1          239.255.67.250    IGMP   IGMP V2 Membership Query .....

once it starts it wont stop until the core switch (10.10.1.1) is shut off and back on
1.5 Million times in 3 minutes. It chokes the rest of the network and things stop.

Why would it continue non-stop?


0
Comment
Question by:MrRude
  • 2
  • 2
4 Comments
 
LVL 50

Expert Comment

by:Don Johnston
ID: 34983515
Half a million packets per minute is a bit much. Do you have a loop in your network somewhere?
0
 
LVL 3

Author Comment

by:MrRude
ID: 34983801
Not that I am aware of. This is a large manufacturing facility and this just pops up at random. We can go along well for weeks and then out of the clear blue - BAM!
Seems to be happening only on days. Nights and weekends never have the issue and production is in full operation. No engineers or office personel nights or weekends. I figured something is being plugged in or triggered somehow, but would like to understand the "Query" better.I assume something triggers the core (which is PIM RP) to query that multicast group. I just can't grasp why it would continue nonstop.
0
 
LVL 50

Accepted Solution

by:
Don Johnston earned 2000 total points
ID: 34983962
In multicast, when a host wants to receive a stream, it will send out an IGMP join message. The router providing that stream to the network will then begin forwarding the stream onto the network. There can be many hosts receiving the same stream. When one of the hosts receiving a multicast stream leaves the group. That host sends an IGMP leave message.

The router that is providing the stream onto that network segment sends out an IGMP group query (to the multicast address). If there are any remaining devices which are still interested in receiving the stream, they will respond. If nobody responds to the query, the router will stop the multicast stream.

The router only sends one query. So what I think might be happening is that you've got a loop and that query is replicating in the loop. Basically a broadcast storm since broadcast and multicast are handled the same way.

0
 
LVL 3

Author Closing Comment

by:MrRude
ID: 35018066
This is the direction I was needing to be pointed in.
Thanks a bunch!
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question