All things related to multicast

[Bill Owens <>]

On Fri, Mar 19, 2010 at 12:44:54PM -0700, Leonard Giuliano wrote:
> 
> Anyone notice a large rate of SAP packets the last few days?  Have seen 
> spikes up to 20Mbps of SAP.  Here's a packet from a flow seen during one 
> of the spikes.  Looks like the culprit is 131.252.176.85:

We haven't observed a spike directly, but we had one site report that they 
were seeing periodic packet loss that they tracked to excessive traffic, and 
further to having left sap listen enabled on some routers. 

Bill.