ProCurve / ProVision-Based
cancel
Showing results for 
Search instead for 
Did you mean: 

Rogue IGMP querier idetection.

horiz0n
Occasional Advisor

Rogue IGMP querier idetection.

Since yesterday I have rogue qurier on the local network:

I 05/18/16 11:21:13 02418 igmp: AM2: VID 3: Start Querier role addr:
            10.172.250.1
I 05/18/16 11:20:09 02416 igmp: AM2: VID 3: Querier Election in progress, addr
            10.172.250.1
I 05/18/16 11:15:47 02417 igmp: AM2: VID 3: End Querier role
I 05/18/16 11:15:47 02415 igmp: AM2: VID 3: Other Querier detected
I 05/18/16 11:10:23 02418 igmp: AM2: VID 3: Start Querier role addr:
            10.172.250.1
I 05/18/16 11:09:19 02416 igmp: AM2: VID 3: Querier Election in progress, addr
            10.172.250.1
I 05/18/16 11:04:58 02417 igmp: AM2: VID 3: End Querier role
I 05/18/16 11:04:58 02415 igmp: AM2: VID 3: Other Querier detected

10.172.250.1 is an ip address configured on the proper querier network switch.

I suspect that someone attached misconfigured switch to the network, but how can I track it down? There is nothing (ip/mac) about detected querier.

Is it possible to force querier IP address on other switches?

4 REPLIES
Vince-Whirlwind
Honored Contributor

Re: Rogue IGMP querier idetection.

What do you get if you do a

show ip igmp vlan 3

?

horiz0n
Occasional Advisor

Re: Rogue IGMP querier idetection.

HP5412R(config)# show ip igmp vlan 3

 IGMP Service Protocol Info

  Total VLANs with IGMP enabled                : 1    
  Current count of multicast groups joined     : 73   

  IGMP Filter Unknown Multicast: Disabled
  IGMP Filter Unknown Multicast Status: Disabled

  VLAN ID : 3
  VLAN Name : Engineering
  IGMP version : 2
  Querier Address [this switch] : 10.172.250.1
  Querier Port :                                                   
  Querier UpTime : 19h 53m 22s         
  Querier Expiration Time : 0h 0m 31s           

  Active Group Addresses Type       Expires         Ports      Reports Queries
  ---------------------- ---------- --------------- ---------- ------- -------
  224.0.75.75            Filter     0h 2m 53s       B11,B19... 7452    0      
  224.2.2.2              Filter     0h 2m 48s       B11        1245    0      
  224.2.2.11             Filter     0h 2m 52s       B11        1246    0      
  224.2.2.13             Filter     0h 2m 53s       B11        1241    0      
  224.2.2.21             Filter     0h 2m 52s       B11        1240    0      
  224.2.2.23             Filter     0h 2m 50s       B11        1244    0      
  224.2.2.31             Filter     0h 2m 54s       B11        1243    0      
  224.2.2.33             Filter     0h 2m 48s       B11        1245    0      
  225.1.5.91             Filter     0h 3m 23s       A22        573     0      
  225.1.6.90             Filter     0h 2m 55s       A22        114     0      
  225.1.6.91             Filter     0h 2m 57s       A22        17      0      
  225.1.100.16           Filter     0h 4m 18s       A16,A21... 11245   0      
  225.10.10.10           Filter     0h 2m 51s       C20,C23    2574    0      
  225.100.0.129          Filter     0h 2m 45s       C15        1234    0      
  225.100.0.150          Filter     0h 2m 51s       A14        1229    0      
  225.100.0.162          Filter     0h 2m 58s       A21        512     0      
  225.100.0.240          Filter     0h 2m 52s       A14,A16    2470    0      
  225.100.0.241          Filter     0h 2m 52s       A14        1249    0      
  225.100.0.242          Filter     0h 2m 51s       A13-A14    2499    0      
  225.100.0.243          Filter     0h 2m 47s       A14        1237    0      
  225.100.0.244          Filter     0h 2m 48s       A14        1236    0      
  225.100.0.245          Filter     0h 2m 54s       A14,A22    2482    0      
  225.100.0.247          Filter     0h 2m 50s       A14        1236    0      
  225.100.0.248          Filter     0h 2m 47s       A14        1235    0      
  225.100.0.249          Filter     0h 2m 50s       A14,A21    27801   0      
  225.100.0.250          Filter     0h 2m 51s       A14        1234    0      
  231.7.7.7              Filter     0h 2m 53s       B19,C10... 3728    0      
  239.77.124.213         Filter     0h 2m 50s       C8,C11     2474    0      
  239.255.5.243          Filter     0h 3m 2s        A21        348     0      
  239.255.5.244          Filter     0h 3m 2s        A21-A22    948     0      
  239.255.218.80         Filter     0h 3m 49s       A21        62      0      
  239.255.230.31         Filter     0h 2m 52s       A21,C12    4512    0      
  239.255.230.32         Filter     0h 3m 39s       A21-A22    1577    0      
  239.255.239.200        Filter     0h 4m 19s       A21        6755    0      
  239.255.241.1          Filter     0h 2m 54s       C1         1236    0      
  239.255.241.2          Filter     0h 2m 48s       C1         1231    0      
  239.255.241.128        Filter     0h 2m 52s       C1,C12     2472    0      
  239.255.243.195        Filter     0h 2m 51s       A16        1236    0      
  239.255.243.200        Filter     0h 2m 47s       A16        1231    0      
  239.255.247.129        Filter     0h 2m 54s       C5         1242    0      
  239.255.247.130        Filter     0h 2m 45s       C5         1246    0      
  239.255.247.131        Filter     0h 2m 48s       C5         1244    0      
  239.255.247.132        Filter     0h 2m 48s       C5         1241    0      
  239.255.249.23         Filter     0h 2m 48s       A14        1245    0      
  239.255.249.27         Filter     0h 2m 45s       A14        1234    0      
  239.255.249.28         Filter     0h 2m 52s       A14        1238    0      
  239.255.249.29         Filter     0h 2m 45s       A14        1231    0      
  239.255.250.1          Filter     0h 3m 59s       A13,A16... 661326  0      
  239.255.250.2          Filter     0h 4m 9s        A21-A22    5616    0      
  239.255.250.3          Filter     0h 4m 7s        A21-A22... 7655    0      
  239.255.250.4          Filter     0h 3m 37s       A21-A22... 8747    0      
  239.255.250.5          Filter     0h 3m 57s       A21-A22    3965    0      
  239.255.250.6          Filter     0h 3m 39s       A21        2862    0      
  239.255.250.7          Filter     0h 4m 15s       A21        1       0      
  239.255.250.8          Filter     0h 0m 2s        A21        2       0      
  239.255.250.9          Filter     0h 4m 19s       A21        1       0      
  239.255.250.11         Filter     0h 4m 19s       A21        2890    0      
  239.255.250.12         Filter     0h 4m 19s       A21-A22    3629    0      
  239.255.250.13         Filter     0h 4m 15s       A21        1       0      
  239.255.250.15         Filter     0h 4m 14s       A21        2       0      
  239.255.250.16         Filter     0h 4m 7s        A21        3954    0      
  239.255.250.17         Filter     0h 4m 16s       A21        2       0      
  239.255.250.20         Filter     0h 3m 20s       A22        2       0      
  239.255.250.21         Filter     0h 4m 18s       A13        1235    0      
  239.255.250.90         Filter     0h 2m 17s       A22        295     0      
  239.255.250.92         Filter     0h 4m 15s       A21        2164    0      
  239.255.250.95         Filter     0h 4m 15s       A21        1428    0      
  239.255.250.96         Filter     0h 0m 33s       A21        283     0      
  239.255.250.106        Filter     0h 4m 15s       A21        1433    0      
  239.255.250.200        Filter     0h 4m 12s       C7         1303    0      
  239.255.250.201        Filter     0h 4m 13s       C7         1241    0      
  239.255.255.250        Filter     0h 4m 15s       A21-A22... 385836  0      
  239.255.255.251        Filter     0h 4m 16s       A22        47      0      
 

HP5412R(config)# 

But it doesn't say which switch (except this) is set to be a querier too.

Vince-Whirlwind
Honored Contributor

Re: Rogue IGMP querier idetection.

What happens if you issue that command after timing it to occur after the following has occurred on the switch:

I 05/18/16 11:04:58 02415 igmp: AM2: VID 3: Other Querier detected

 

Also,, same timing, run the command on another switch on your network. 

Vince-Whirlwind
Honored Contributor

Re: Rogue IGMP querier idetection.

What happens if you issue that command after timing it to occur after the following has occurred on the switch:

I 05/18/16 11:04:58 02415 igmp: AM2: VID 3: Other Querier detected

Also,, same timing, run the command on another switch on your network.