All things related to multicast

[Scott S Bertilson <>]

  It might be worth looking for Ricoh printers on
your network.  They are a well known problem for
sending out UPNP packets at a ridiculously high
rate with some versions of firmware.  If most or
all of these messages refer to the same source
address, you really ought to find out what piece
of equipment is at that address.
                                Scott

On Thu, Sep 24, 2009 at 11:49:09AM -0300, Ying Zhang wrote:
> Hi list,
> 
> We have PIM-SM enabled on our network. Recently we've seen tons of log 
> messages on our switch:
> 
> CPU5 [09/24/09 14:21:47] IPMC ERROR ipmSysAddSession FAIL: Ar AddIpmcRec S 
> x.x.96.47 G 239.255.255.250
> CPU5 [09/24/09 14:21:47] IPMC WARNING ipmSysArAddIpmcRec rarAddIpmc FAIL G 
> 239.255.255.250 !
> CPU5 [09/24/09 14:21:47] IPMC WARNING k_chg_mfc FAIL New Session x.x.96.47 
> 239.255.255.250 is failed
> 
>  This has caused our switch to act slow and even drop some SNMP packets. I 
> did some search and found out it's SSDP for Windows Universal Plug and 
> Play.  On the mcast routing table, I can see many other users using the 
> same protocol, but only a few were logged with the error messages. I 
> suspect the user OS was affected by some virus. Just wondering if anyone 
> else has seen this and how to fix it on our end. 
> 
> Thanks.
> 
> Ying
> 
> 
> Network Engineer
> UNB