Solved

IGMP V2 Membership Query

Posted on 2011-02-25
4
1,069 Views
Last Modified: 2012-05-11
Without getting into details at first, just want a broad explanation.
Can someone explain what would cause the following:
Packet capture example:
Source add.     Dest add                
10.10.1.1          239.255.67.250    IGMP   IGMP V2 Membership Query .....

once it starts it wont stop until the core switch (10.10.1.1) is shut off and back on
1.5 Million times in 3 minutes. It chokes the rest of the network and things stop.

Why would it continue non-stop?


0
Comment
Question by:MrRude
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 50

Expert Comment

by:Don Johnston
ID: 34983515
Half a million packets per minute is a bit much. Do you have a loop in your network somewhere?
0
 
LVL 3

Author Comment

by:MrRude
ID: 34983801
Not that I am aware of. This is a large manufacturing facility and this just pops up at random. We can go along well for weeks and then out of the clear blue - BAM!
Seems to be happening only on days. Nights and weekends never have the issue and production is in full operation. No engineers or office personel nights or weekends. I figured something is being plugged in or triggered somehow, but would like to understand the "Query" better.I assume something triggers the core (which is PIM RP) to query that multicast group. I just can't grasp why it would continue nonstop.
0
 
LVL 50

Accepted Solution

by:
Don Johnston earned 500 total points
ID: 34983962
In multicast, when a host wants to receive a stream, it will send out an IGMP join message. The router providing that stream to the network will then begin forwarding the stream onto the network. There can be many hosts receiving the same stream. When one of the hosts receiving a multicast stream leaves the group. That host sends an IGMP leave message.

The router that is providing the stream onto that network segment sends out an IGMP group query (to the multicast address). If there are any remaining devices which are still interested in receiving the stream, they will respond. If nobody responds to the query, the router will stop the multicast stream.

The router only sends one query. So what I think might be happening is that you've got a loop and that query is replicating in the loop. Basically a broadcast storm since broadcast and multicast are handled the same way.

0
 
LVL 3

Author Closing Comment

by:MrRude
ID: 35018066
This is the direction I was needing to be pointed in.
Thanks a bunch!
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SSL is a very common protocol used these days when browsing the web.  The purpose is to provide security to communication, but how does it do it?  There are several pieces at work that have to be setup before SSL will even work and it requires both …
Before I go to far, let's explain HA (High Availability) and why you should consider it.  High availability is the mechanism used to provide redundancy to any service at the same site and appears as a single service to the users of that service.  As…
Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question