Multicast Traffic storm flooding network

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Alan (anonymous_at_discussions.microsoft.com)
Date: 05/05/04 

Date: Tue, 4 May 2004 20:13:10 -0700

Correct me if I am wrong - but that SSP traffic is UPNP
packets. Stop the universal Plug-n-play service and see
if the problem still hapens.

Its not required unless you have some UPNP device you
want to manage using it - and in an enterprise its
unlikely you do (they tend to be home routers,
refridgerators etc)

>-----Original Message-----
>We moved to a new location over the weekend, and have a
problem that seems
>to occur after the network is up for about two hours.
We have a small
>network - a couple Windows 2000 servers, with Windows
98, 2000, and XP
>clients. All computers, along with a T1 line, are
connected to an HP
>Procurve Switch. After starting up the network,
everything seems to work
>fine for a few hours. Suddenly, the network appears
unresponsive.
>
>Our domain controller appears to be the culprit. This
server has two NICs,
>which are both connected to the switch. Using the web-
based monitor
>available on the switch, I discovered that one of the
NICs, along with the
>T1 line are both at 100% utilization. I installed the
network monitor
>component on the server, and discovered that the source
of the problem
>appears to be thousands of multicast frames per second
being sent to the T1
>line. The multicast frames are of the form, with
seemingly random IP
>Addresses listed:
>
>Dest MAC Protocol Desc
>
>000BFD0F0B00 SSP Unknown Security Support
Provider
>
>It doesn't appear that any Multicast traffic is used on
the network until
>this situation occurs.
>
>Questions:
>
>What is multlicast traffic used for? Is there any way I
can disable
>Multicast traffic on the server's NIC?
>
>What is SSP?
>
>What steps can I take to debug this problem? (I have
tried turning
>Automatic Broadcast Control and Multicast Filtering on
the switch, to no
>avail. I also tried enabling Spanning-Tree
Protocol...Is having two network
>cards on the server connected to the same switch a
potential source of
>problems?)
>
>I have also read that we could have a half/full duplex
problem...Currently,
>I have all ports on the switch set to auto. Should I
manually set the ports
>for the server and the T1 line? If so, what should a T1
line usually be set
>to?

Relevant Pages

  • Re: Multicast Traffic storm flooding network
    ... All computers, along with a T1 line, are connected to an HP> Procurve Switch. ... After starting up the network, everything seems to work> fine for a few hours. ... I installed the network monitor> component on the server, and discovered that the source of the problem> appears to be thousands of multicast frames per second being sent to the T1 ...
    (microsoft.public.windows.server.networking)
  • Re: Help with IGMP
    ... By default it should forward multicast traffic to all port. ... good, it clog the network. ... It switch is has no VLAN or single VLAN and all ... the layer 2 protocol to allow switch interfaces to join multcast streams. ...
    (comp.dcom.sys.cisco)
  • Re: iis6 application compression
    ... Compression can be applied for dynamic as well as static content. ... Regarding the switch being flooded with SSL traffic -- that's what multicast ... A network packet sniffer reveals that all ports on the switch are getting ...
    (microsoft.public.inetserver.iis)
  • Multicast Traffic storm flooding network
    ... After starting up the network, ... This server has two NICs, ... which are both connected to the switch. ... The multicast frames are of the form, ...
    (microsoft.public.windows.server.networking)
  • Re: Whats this about ?
    ... >> Could be UPnP, if you're running XP, or have any UPnP aware devices on ... I don't think I've got any UPnP devices on the network. ... > old Windows 95 machines. ... Unless you have a specific need for multicast and the use of these ...
    (comp.security.firewalls)