+ Post New Thread
Results 1 to 3 of 3
Windows Server 2008 Thread, Broadcast Storm LLMNR in Technical; Hi Folks, I have a Windows Server 2008 box that on Wednesday starting firing out LLMNR packets on port 5355. ...
  1. #1
    BooBoo's Avatar
    Join Date
    Jul 2006
    Location
    Dorset
    Posts
    77
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Broadcast Storm LLMNR

    Hi Folks,

    I have a Windows Server 2008 box that on Wednesday starting firing out LLMNR packets on port 5355. At it's peak it was firing 29,000 a second. Which crippled our network and some of the sourounding schools lost the internet.
    I have disable IPv6 on the NIC and have used group policy and a registry hack to disable LLMNR traffic but I still have the storm occuring.
    NOD 32 show nothing and Search and Destroy comes back clean.

    I don't want to rebuild this server as it it one of our application servers. I could use a backup but I'm afraid that without knowing the cause or cure it might occur again.


    Any ideas?

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Could try switching it off for now - as it is of limited use on an established lan: (Vista but reg should be the same or at least GP)
    How to disable LLMNR - microsoft.public.windows.vista.networking_sharing | Google Groups

    Microsoft Enterprise Networking Team : How to benefit from Link-Local Multicast Name Resolution.
    Last edited by SYNACK; 16th June 2009 at 12:41 PM.

  3. #3
    BooBoo's Avatar
    Join Date
    Jul 2006
    Location
    Dorset
    Posts
    77
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Tried those

    I've already tried both of those but to no avail. It now looks like with the exception of my Exchange server all of my Win 2008 and Vista machines broadcast on the network immediatley.

    My next step will be to 'pull' buildings off the network to see if a machine in an adjacent building is telling these machines to broadcast. SpyBot S&D and NOD32 both come back negative.

    Any other ideas?
    Martin



SHARE:
+ Post New Thread

Similar Threads

  1. Broadcast VNC Like
    By damien.deakes in forum How do you do....it?
    Replies: 3
    Last Post: 25th July 2008, 01:23 PM
  2. Broadcast a desktop to other PCs
    By magicker2 in forum Network and Classroom Management
    Replies: 6
    Last Post: 15th May 2008, 02:26 PM
  3. Powerpoint online broadcast
    By SteveBentley in forum How do you do....it?
    Replies: 6
    Last Post: 11th April 2008, 10:22 PM
  4. Network Broadcast
    By armadillo in forum Network and Classroom Management
    Replies: 9
    Last Post: 17th October 2007, 12:45 PM
  5. Internet Radio Broadcast software?
    By CyberNerd in forum Educational Software
    Replies: 15
    Last Post: 15th March 2007, 03:09 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •