Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Strange Strange Brodcast

hello

i cleared the counter for my gig interface connected to DS.and i watch my strange brodcast:

brodcast incresed every second i issue sh interface gig0/1

92601

185392

271123

314004

335597

364242

385654

1078788

2935007

plz help to overcome

28 REPLIES
Hall of Fame Super Bronze

Re: Strange Strange Brodcast

What is DS ?

Can you post the output from show interface g0/1 ?

New Member

Re: Strange Strange Brodcast

hello edison!

ds:its distribution:

SW#sh interfaces gigabitEthernet 0/1

Encapsulation ARPA, loopback not set

Keepalive set (10 sec)

Full-duplex, 1000Mb/s

Link type is autonegotiation, media type is SX

output flow-control is off, input flow-control is off

ARP type: ARPA, ARP Timeout 04:00:00

Last input 00:00:00, output 00:00:03, output hang never

Last clearing of "show interface" counters 03:59:45

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue :0/40 (size/max)

5 minute input rate 7006000 bits/sec, 7053 packets/sec

5 minute ouxtput rate 0 bits/sec, 0 packets/sec

102537443 packets input, 4241617996 bytes, 0 no buffer

Received 102361096 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

0 watchdog, 102195392 multicast, 0 pause input

0 input packets with dribble condition detected

4618 packets output, 862882 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collision, 0 deferred

0 lost carrier, 0 no carrier, 0 PAUSE output

0 output buffer failures, 0 output buffers swapped out

New Member

Re: Strange Strange Brodcast

edison

have a look to the Brodcast now:

Received 118415322 broadcasts.help me to Kill This Brodcast

Hall of Fame Super Bronze

Re: Strange Strange Brodcast

wow, you have a ton of input traffic with no output traffic.

Did you try telneting to the device connected on G0/1 ? What type of device is connected to G0/1 ?

It looks like you have a virus.

New Member

Re: Strange Strange Brodcast

hello!

gig0/1 Connected to Distribution-Switch.help

Hall of Fame Super Bronze

Re: Strange Strange Brodcast

Did you telnet to this switch and check the port counters to identify which switchport is the one sending the most traffic ?

New Member

Re: Strange Strange Brodcast

do i need to check every port by sh interface fx/y

10xs

Cisco Employee

Re: Strange Strange Brodcast

Hi,

The first question coming to my mind: what is causing the broadcast traffic? Can you use a packet analyzer like Wireshark to record the packets utilizing a SPAN port?

This should help to identify the cause of the broadcast packets and thus maybe allow you to stop it at the origin.

I know some applications use broadcast to distribute data, which could explain the observed behaviour.

Regards, Martin

New Member

Re: Strange Strange Brodcast

in the wireshake gives us Ipv6 traffic try to join Multicast group.we dont have ipv6 enabled

New Member

Re: Strange Strange Brodcast

so shut off the ipv6 on the clients that are trying to join... Vista has ipv6 enabled by default.

Cisco Employee

Re: Strange Strange Brodcast

Which source MAC address is seen? Track the source MAC address(es) to the switch port(s) connecting the end device(s). In some operating systems IPv6 is turned on by default (or misconfiguration by admins).

Once you know the end device you need to check the operating system settings. In MS you could simply disable the protocol for the network card in the LAN Properties Tab.

Regards, Martin

New Member

Re: Strange Strange Brodcast

the Source is Empty

Cisco Employee

Re: Strange Strange Brodcast

Empty? you mean all zeros as source MAC address? A standard ethernet frame has to have a source MAC and a destination MAC. Can you attach a small sample of collected packets in a zipped file?

Regards, Martin

New Member

Re: Strange Strange Brodcast

yeh its coming from the Distribution the IP of the interface Vlan 12.12.12.3?helpppppppppppppp.what happend?

New Member

Re: Strange Strange Brodcast

hello

here's my captured file.have a look

10xs

New Member

Re: Strange Strange Brodcast

edison any reply here based on the above diagrams.and could i stop this Brodacst due to ICMP IPv6

Hall of Fame Super Bronze

Re: Strange Strange Brodcast

Ali,

Based on the screenshot you posted, it seems you are seeing lots of MLD (Multicast Listener Discovery) packets.

You can control and block this traffic by following this URL

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ipv6_r/ipv6_06g.htm#wp2016579

New Member

Re: Strange Strange Brodcast

Hello Edison

i have 2 DSs 720 each.

interface Vlan 100 and interface vlan 101.plz lit the Switable config according this 2 interfaces

10xs

Re: Strange Strange Brodcast

Hi Ali,

Since the traffic is coming from the switch and you are sure that IPv6 is disabled in the switch. Can you post the "show version" output of the switch? It could be a bug.

Regardes,

Dandy

New Member

Re: Strange Strange Brodcast

how can i know ipv6 is disable on the Switch(6509 720)?

Re: Strange Strange Brodcast

Hi Ali,

show ipv6 interface [interface-id]

show ipv6 route

show ipv6 static

Make sure you don't use IPv6 first.

In the global configuration mode

SW(config)# no ipv6 unicast-routing

In the interface configuration mode

SW(config-if)#no ipv6 enable

Regards,

Dandy

New Member

Re: Strange Strange Brodcast

HELLO

WHAT ABOUT THE GROUP STATE BASED ON THE SCREENSHOT TO DEFINE THE IPV6 ACCESS-LIST?

10XS

New Member

Re: Strange Strange Brodcast

and also based on the snapshot.i didnt understand this:ff04::10 do i need to configure it or find the Destination based on my snapshot

10xs

New Member

Re: Strange Strange Brodcast

Hello edison!

in my situation what is state for groups based in my screen shot?i have a lots of groups

10xs

New Member

Re: Strange Strange Brodcast

hello

any extra Reply

10xs

Cisco Employee

Re: Strange Strange Brodcast

Hi,

have a look at the source mac addresses seen, which is HighTech_1d:b3:01 in the screenshot. Track the mac address in the switches to the access port (presumably "show mac-address-table") and have a look at the attached device. I would assume the source is not a switch, but a host with default IPv6 settings. Once you found the host(s), check the network card settings and disable IPv6, as you do not want it to be active. In case you do not know how to disable it, please provide more informations on the host(s) causing the issue.

In brief:

1) find access port in the switches by tracking MAC address

2) identify host connected

3) check network card settings connected to switch port

Regards, Martin

New Member

Re: Strange Strange Brodcast

Hello

how can i track A MAC ADDRESS?

10XS

New Member

Re: Strange Strange Brodcast

hello

I DID EVERY THING BUT THE PROBLEM(BRODCAST) STILL EXIST.HOW U HELP?

10XS

174
Views
50
Helpful
28
Replies
CreatePlease login to create content