I noted what seems to be excessive multicast traffic coming from a CME 2821 and was a-wonderin what would be considered normal.
I am seeing about 55 packets per second (3300 per minute) of the following:
Source: CME Router
Source Port: cisco-sccp
Destination Port: cisco-sccp
Data: no human readable :)
Is this normal or is something fishy going on here.
I am having a problem with multicast UDP traffic causing slowness on the network. it's broadcasting multicast cisco-sccp packets about 200 a second to every one in the place. Below is the results of traffic monitoring on the network.
1121 21.200753 10.1.1.1 18.104.22.168 UDP Source port: cisco-sccp Destination port: cisco-sccp
So you think that the above indicates MOH traffic?
Wouldnt the ports be different if it were MOH?
Look under telephony-service in the router config, what are the two lines that start with
Bingo..... so if I turn this off how will MoH work?
multicast moh 22.214.171.124 port 2000
If you turn multicast MOH off you will not get MOH for ip phone to ip phone
calls(only TOH), you will still get MOH for PSTN calls that arew placed
Yes unicast MOH is an option, however it has a maximum of only 10 phones because it places more load on the router