+ Post New Thread
Results 1 to 14 of 14
Wireless Networks Thread, Flood of IGMP Traffic in Technical; Since we got our new core switch we have noticed a problem. Quite frequently the activity lights on it will ...
  1. #1

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Flood of IGMP Traffic

    Since we got our new core switch we have noticed a problem.
    Quite frequently the activity lights on it will just glow solidly, indicating constant traffic.
    I suppose its testament to the switch that it doesnt affect the network much, although it makes ping times awful and stops us being able to communicate with the AP's

    They never did this with the old switch although it could be we just never noticed?

    They are Cisco AP's, which we have all around the school but they are slightly different models, they are 1130AG's whereas our other ones are slightly older 1100's.

    They are all in one area and one suggestion was that a power surge could have damaged one. Credible, until we found that when we unplugged what we thought was the cause, 20 minutes later it would be happening again, so it is basically all of them

    Is there an option that could be switched on causing massive broadcast traffic or could they just all be faulty? Theres 6 altogether and they were over £300 each so we cant really replace them all. We also cannot use spares of the other type because they are only G, and the Apple Airports in that area already use G

    EDIT: changed title to suit the new problem a bit better - could really do with some help on this one

  2. #2
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Re: Any reason access points would cause excessive traffic?

    I had a broadcast storm form a faulty WAP.. took me hours to find it..

  3. #3

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Any reason access points would cause excessive traffic?

    If you have two AP's setup as a bridge an also have them wired this will cause a network loop.

    I'd enable STP on all your core switches though aswell.

  4. #4

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Re: Any reason access points would cause excessive traffic?

    Sorry but what benefit would enabling STP give me?

    We havent got any redundant routes to anything so Ive never bothered enabling it, as it doesnt exactly seem a simple task

    Dont you have to enable it on every switch if you do it on 1?

  5. #5


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339

    Re: Any reason access points would cause excessive traffic?

    Sorry but what benefit would enabling STP give me?
    It will stop an accidental (or deliberate) loop from bringing the network down.

    For the benefit it gives it is well worth doing, yes you need to log into every switch but it will be worth it in the long run

  6. #6

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Re: Any reason access points would cause excessive traffic?

    OK fair enough

    although in this case, it definatly isnt a loop, its just a case of when the AP's are plugged in the activity shoots up...when you unplug them it stops

    Also checked all rooms in that block for any loops

    Might consider doing STP at easter or summer though.
    One thing Ive heard however is that with it enabled, client machines can take up to 30 seconds to be connected as the switch checks for loops - does that cause any problems?

  7. #7

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,630
    Thank Post
    890
    Thanked 1,313 Times in 798 Posts
    Blog Entries
    1
    Rep Power
    441

    Re: Any reason access points would cause excessive traffic?

    Ethereal it.
    See the packets and see if a PC is screaming (like what happened to us) on its LAN card due to a fault.

  8. #8

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Re: Any reason access points would cause excessive traffic?

    Good idea Zerohour

    Ive done a capture with just one of them active - nothing suspicious really

    Now ive plugged them all in and as soon as I see the switch start to go mental, Ill start another one and see whats causing this

    Knowing my luck it probably wont happen for days now!

  9. #9

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180

    Re: Any reason access points would cause excessive traffic?

    MRTG can help show particularly high load too.

  10. #10

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Re: Any reason access points would cause excessive traffic?

    Thanks, not heard of that before. Will give it a go

  11. #11

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Re: Any reason access points would cause excessive traffic?

    Right, it happened just now. Ran Ethereal and within 30 seconds I had collected 100's of thousands of packets, all IGMP ones, from our core switch saying 'V2 Membership Request'

    The destination though was not an access point, but a 224.x.x.x address which is a multicast address if Im not mistaken?

    anyone got a clue what they could be

    again though, going through and unplugging each AP to see if it stopped it worked - in the end just one was the 'cause'

    EDIT: just looked on our core switch (Extreme Summit 7i) and IGMP is enabled. I dont know a huge amount about it but I assume I can just disable it?

  12. #12

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49

    Re: Any reason access points would cause excessive traffic?

    OK just looked into it a bit more and it seems its used for Ghost multicasting so not something that should be disabled

    I was thinking, could there be a computer over in that block that is causing such a large amount of queries? Unfortunatly I forgot to check what was going on in the room where the offending AP was

    Or some sort of DOS attack?

  13. #13

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,784
    Thank Post
    272
    Thanked 1,129 Times in 1,025 Posts
    Rep Power
    348
    Did you ever manage to sort this? i have just looked on our isa and there is loads of IGMP requests to the same broadcast address.

  14. #14

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,962
    Thank Post
    159
    Thanked 152 Times in 116 Posts
    Rep Power
    49
    Sort of...we replaced 2 of the access points and all was fine I think. Since then though we have a new core switch and all new WAPs though

SHARE:
+ Post New Thread

Similar Threads

  1. ISA 2006 - SMTP Traffic
    By UBBERgoose in forum Windows
    Replies: 3
    Last Post: 28th August 2007, 09:54 AM
  2. Logging IM traffic
    By ITWombat in forum School ICT Policies
    Replies: 1
    Last Post: 17th February 2007, 05:23 PM
  3. P2P Traffic Filter
    By Peter in forum Wireless Networks
    Replies: 1
    Last Post: 8th January 2006, 11:34 PM
  4. Web Traffic Via Outlook
    By shane_southampton in forum Windows
    Replies: 7
    Last Post: 13th September 2005, 10:12 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •