+ Post New Thread
Results 1 to 10 of 10
Wireless Networks Thread, Noisy broadcasting- How to detect IP? in Technical; I have 8 Procurve Switches on the network, and i seem to have a problem with a slow steady build ...
  1. #1

    Join Date
    Mar 2007
    Posts
    130
    Thank Post
    29
    Thanked 5 Times in 4 Posts
    Rep Power
    17

    Noisy broadcasting- How to detect IP?

    I have 8 Procurve Switches on the network, and i seem to have a problem with a slow steady build up of broadcast traffic that culminates after about 7 days with switch lockups, due to too much data on the network.

    I have dloaded PCM and can contact and monitor all the switches. I have turned off Spannnig tree, but turned on loop-protect on the two switches that support it.

    When i looked at the heavy utilization of traffic i noticed that the majority was broadcast traffic, is there some tool that i could monitor the network and drag out a report of noisy host IP's?

    Cheers

  2. #2

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    Boston, MA
    Posts
    7,601
    Thank Post
    110
    Thanked 771 Times in 599 Posts
    Rep Power
    183
    Wireshark is your friend - Wireshark: Go deep.

    If you don't turn on port mirroring/port monitoring/whatever it's called on this level of firmware you will only see broadcast traffic but that's what you want anyway.

  3. Thanks to Ric_ from:

    steele_uk (24th September 2009)

  4. #3

    Join Date
    Mar 2007
    Posts
    130
    Thank Post
    29
    Thanked 5 Times in 4 Posts
    Rep Power
    17
    Many thanks.

    I have 80% UDP traffic to 20%TCP on my Network sample. I would imagine this should be completely the other way around?

    Can anyone confirm these figures are way out?

  5. #4
    budgester's Avatar
    Join Date
    Jan 2006
    Location
    Enfield, Middlesex
    Posts
    486
    Thank Post
    4
    Thanked 38 Times in 30 Posts
    Rep Power
    25
    Yup, vote for wireshark, you should be able to get to IP that is broadcasting.

    Could be a dodgy NIC.

    I know of an IP Phone system that did loads of broadcasting, so had to vlan it off.

  6. #5

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,867
    Thank Post
    412
    Thanked 778 Times in 651 Posts
    Rep Power
    182
    Quote Originally Posted by steele_uk View Post
    Many thanks.

    I have 80% UDP traffic to 20%TCP on my Network sample. I would imagine this should be completely the other way around?

    Can anyone confirm these figures are way out?
    No, because they are irrelevant. You're looking for broadcast traffic as oppose to unicast, not protocol differences.

  7. #6

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    Boston, MA
    Posts
    7,601
    Thank Post
    110
    Thanked 771 Times in 599 Posts
    Rep Power
    183
    A lot of broadcast traffic is UDP IME. If you port mirror so that you pick up EBERYTHING, you will find that the UDP traffic is much lless.

    Ignore the types of traffic and concentrate on the sources.

  8. #7

    Join Date
    Jun 2007
    Location
    Rochdale
    Posts
    239
    Thank Post
    28
    Thanked 35 Times in 30 Posts
    Rep Power
    21
    if you launch Wireshark and go to Capture -> Interfaces -> Options (for the relevant NIC) then put in the Capture Filter box 'broadcast and multicast' without quotes, It will only capture Broadcast and Multicast packets and ignore any other traffic to and from your machine.

  9. Thanks to Chris_Jones from:

    OutToLunch (28th September 2009)

  10. #8

    Join Date
    Feb 2006
    Location
    Derbyshire
    Posts
    1,381
    Thank Post
    181
    Thanked 211 Times in 171 Posts
    Rep Power
    66
    Quote Originally Posted by Chris_Jones View Post
    if you launch Wireshark and go to Capture -> Interfaces -> Options (for the relevant NIC) then put in the Capture Filter box 'broadcast and multicast' without quotes, It will only capture Broadcast and Multicast packets and ignore any other traffic to and from your machine.
    Would have been handy to know that last time I was chasing a cable plugged back into a desktop switch - cheers!

  11. #9
    mpe
    mpe is offline

    Join Date
    Nov 2008
    Location
    Exeter
    Posts
    1,185
    Thank Post
    131
    Thanked 73 Times in 63 Posts
    Rep Power
    35
    Quote Originally Posted by steele_uk View Post
    Many thanks.

    I have 80% UDP traffic to 20%TCP on my Network sample. I would imagine this should be completely the other way around?

    Can anyone confirm these figures are way out?
    Without knowing what you are running on your network this isn't much help.

    Far more use to look at the source and destination IP or MAC addreses. Indeed you'd probably be better off looking at the MAC addresses. Since the troublesome packets need not be IPv4 in the first place.

  12. #10
    Dilbert's Avatar
    Join Date
    May 2009
    Location
    West Sussex
    Posts
    14
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Just a thought, do you have any streeming on that part of the network?

    Happened here when a tech turned off the IGMP blocking and flodded the network with multicast traffic!! Needless to say, he doens't work here any more



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 0
    Last Post: 1st September 2009, 08:48 PM
  2. [Pics] That Will Be One Noisy Fan!
    By DaveP in forum Jokes/Interweb Things
    Replies: 3
    Last Post: 13th August 2009, 11:05 PM
  3. Noisy Hard Disk
    By TechSupp in forum Hardware
    Replies: 3
    Last Post: 27th May 2009, 10:46 PM
  4. Broadcasting audio across a site
    By nutso in forum How do you do....it?
    Replies: 12
    Last Post: 18th November 2008, 12:03 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •