Urgent Help Needed

RouterOS General
1

Hi Guys,
I have a really big problem at the moment that is knocking out over 40 clients on me on one interface.
I have a rb750up with pppoe running on ether2. The rx rate on it is a constant 5Mb with over 4000 p/s.
Using torch, I can see that the protocol is IGMP with source address 172.16.0.139 and destination 224.0.0.22.

I created a rule to drop anything from both ip addresses. This halved the throughput been generated and halved the pps.
It has brought back my pppoe clients.

But this has not been dropped completely and it worries me.

Anyone tell me why this is happening and the solution to deal with it?

2

Its multicast. One of your clients is multicasting something (some IP cameras do this for example) and your switches are treating multicast as broadcast (there is your problem), therefore, everyone gets it.

Also, I would guess your network is one big L2 bridged network, which just multiplies the problem.

3

get in contact with the user who is sending this multicast traffic. if you have a switch environment resolve his mac , find his switch port and set it to shut. i guess he will get in contact with you. :wink: