salam
Apprentice
Joined: 29 Sep 2005
Posts: 226
|
 Posted: Fri Jun 10, 2022 5:23 pm Post subject: How to find what is sending IGMP report? |
 |
|
I am trying to setup igmpproxy daemon, so far I managed to get it running and I'm able to receive.
But here is the funny part. I stop the process and igmp is still sent!
What could cause this?
| Code: | 19:13:49.263728 IP 10.168.160.2 > 224.0.0.1: igmp query v2
19:13:53.803880 IP 10.168.160.10 > 239.255.255.246: igmp v2 report 239.255.255.246
19:13:57.413893 IP 10.168.160.10 > 232.232.64.5: igmp v2 report 232.232.64.5
19:13:57.576983 IP 10.168.160.2 > 224.0.0.13: PIMv2, Hello, length 38
19:14:27.259944 IP 10.168.160.2 > 224.0.0.13: PIMv2, Hello, length 38
|
Address 232.232.64.5 is a valid source, but there should be nothing requesting it after igmpproxy is stopped.
And of course, I'm being fed multicast because of this even if there is no receiver running.
I am not aware about any live process that could send that, should it be kernel generated? |
|
Networking & Security
