Packet sniffer/SSDP question....

[jimmysands73_2]

Trying to troubleshoot a network here.....

Question, why would a PC spit out a SSDP packet every .000015 seconds?  Is this normal?

[John Blakley · Accepted solution]

You should start disabling running apps and services to see if you can narrow down what app is causing that much traffic. SSDP is used for UPnP....if you don't need this service, you can disable UPnP and should see these go down.

[hobbe · Accepted solution]

Hi

Windows messenger is a strong candidate.

and well it sounds like a lot.

good luck

hth

[jimmysands73_2]

Left yesterday with network normalized, get call today about 11:30 its gone to hell again (no connectivity past LAN rtr).  Sniff showed same data as screen shot.   The offending MAC was hard to track down, as shown below (Extreme), finally found it.

* 045-SW:41 # sh fdb 44:37:e6:5b:d8:8b
Index Mac Vlan Age Use Flags                                                             Port List
--------------------------------------------------------------------------
0cac0-013 44:37:E6:5B:D8:8B User_VLAN(0010) 0000000 0000 d m 20(Port)

Flags: (B) Egress Blackhole, (b) Ingress Blackhole, (d) Dynamic, (s) Static
(p) Permanent, (m) MAC, (S) secure MAC, (l) lockdown MAC
(L) lockdown MAC with timeout, (M) Mirror, IP
(z) translation MAC, (Q) Questionable, (R) Remapped

Total: 282 Static: 158 Perm: 0 Locked: 0 Secure: 0 Dynamic: 124 Dropped: 0
Questionable: 0 Remapped: 0 Locked with timeout: 0
FDB Aging time: 300 seconds

* 045-SW:42 # dis port 20
* 045-SW:43 # sh fdb 44:37:e6:5b:d8:8b
Index Mac Vlan Age Use Flags                                                        Port List
--------------------------------------------------------------------------
0cac0-019 44:37:E6:5B:D8:8B User_VLAN(0010) 0000000 0000 d m 26(Port)

Flags: (B) Egress Blackhole, (b) Ingress Blackhole, (d) Dynamic, (s) Static
(p) Permanent, (m) MAC, (S) secure MAC, (l) lockdown MAC
(L) lockdown MAC with timeout, (M) Mirror, IP
(z) translation MAC, (Q) Questionable, (R) Remapped

Total: 280 Static: 158 Perm: 0 Locked: 0 Secure: 0 Dynamic: 122 Dropped: 0
Questionable: 0 Remapped: 0 Locked with timeout: 0
FDB Aging time: 300 seconds

* 045-SW:44 # dis port 26
* 045-SW:45 # sh fdb 44:37:e6:5b:d8:8b
Index Mac Vlan Age Use Flags Port List
--------------------------------------------------------------------------
0cac0-020 44:37:E6:5B:D8:8B User_VLAN(0010) 0000000 0000 d m 33(Port)

Flags: (B) Egress Blackhole, (b) Ingress Blackhole, (d) Dynamic, (s) Static
(p) Permanent, (m) MAC, (S) secure MAC, (l) lockdown MAC
(L) lockdown MAC with timeout, (M) Mirror, IP
(z) translation MAC, (Q) Questionable, (R) Remapped

Total: 279 Static: 158 Perm: 0 Locked: 0 Secure: 0 Dynamic: 121 Dropped: 0
Questionable: 0 Remapped: 0 Locked with timeout: 0
FDB Aging time: 300 seconds
* 045-SW:49 # dis port 33
* 045-SW:50 #
* 045-SW:50 #
* 045-SW:50 # sh fdb 44:37:e6:5b:d8:8b
Index Mac Vlan Age Use Flags Port List
--------------------------------------------------------------------------
0cac0-006 44:37:E6:5B:D8:8B User_VLAN(0010) 0000000 0000 d m 7(Port)

Flags: (B) Egress Blackhole, (b) Ingress Blackhole, (d) Dynamic, (s) Static
(p) Permanent, (m) MAC, (S) secure MAC, (l) lockdown MAC
(L) lockdown MAC with timeout, (M) Mirror, IP
(z) translation MAC, (Q) Questionable, (R) Remapped

Total: 276 Static: 158 Perm: 0 Locked: 0 Secure: 0 Dynamic: 118 Dropped: 0
Questionable: 0 Remapped: 0 Locked with timeout: 0
FDB Aging time: 300 seconds

* 045-SW:51 # dis port 7
* 045-SW:52 # sh fdb 44:37:e6:5b:d8:8b
Index Mac Vlan Age Use Flags Port List
--------------------------------------------------------------------------
0cac0-001 44:37:E6:5B:D8:8B User_VLAN(0010) 0000000 0000 d m 2(Port)

Flags: (B) Egress Blackhole, (b) Ingress Blackhole, (d) Dynamic, (s) Static
(p) Permanent, (m) MAC, (S) secure MAC, (l) lockdown MAC
(L) lockdown MAC with timeout, (M) Mirror, IP
(z) translation MAC, (Q) Questionable, (R) Remapped

Total: 275 Static: 158 Perm: 0 Locked: 0 Secure: 0 Dynamic: 117 Dropped: 0
Questionable: 0 Remapped: 0 Locked with timeout: 0
FDB Aging time: 300 seconds