zdravim,
neviem presne do ktoreho fora s tym, ale dnes som si vsimol zvlastne spravanie v mojej domacej sieti a rad by som vedel, co to je.

v sieti je niekolko zariadeni pripojenych cez wifi a 3 kablom. vsimol som si zvlastne logy na routri.

takto vyzera log z routra (je to len vynatok zaznamov, neustale sa opakuju tie iste):
Nov 5 01:28:26 rlx-linux user.info syslog: igmpproxy: Drop membership 224.168.100.1
Nov 5 01:28:26 rlx-linux user.notice syslog: Note: removing MFC: 0.0.0.0 -> 224.168.100.1, InpVIf: 1
Nov 5 01:28:27 rlx-linux user.info syslog: igmpproxy: Add membership 224.168.100.1
Nov 5 01:28:27 rlx-linux user.debug syslog: Debu: adding MFC: 0.0.0.0 -> 224.168.100.1, InpVIf: 1
Nov 5 01:28:37 rlx-linux user.info syslog: igmpproxy: Drop membership 224.168.100.1
Nov 5 01:28:37 rlx-linux user.notice syslog: Note: removing MFC: 0.0.0.0 -> 224.168.100.1, InpVIf: 1
Nov 5 01:28:38 rlx-linux user.info syslog: igmpproxy: Add membership 224.168.100.1
Nov 5 01:28:38 rlx-linux user.debug syslog: Debu: adding MFC: 0.0.0.0 -> 224.168.100.1, InpVIf: 1
Nov 5 01:28:48 rlx-linux user.info syslog: igmpproxy: Drop membership 224.168.100.1
Nov 5 01:28:48 rlx-linux user.notice syslog: Note: removing MFC: 0.0.0.0 -> 224.168.100.1, InpVIf: 1
Nov 5 01:28:49 rlx-linux user.info syslog: igmpproxy: Add membership 224.168.100.1
Nov 5 01:28:49 rlx-linux user.debug syslog: Debu: adding MFC: 0.0.0.0 -> 224.168.100.1, InpVIf: 1
Nov 5 01:28:59 rlx-linux user.info syslog: igmpproxy: Drop membership 224.168.100.1
Nov 5 01:28:59 rlx-linux user.notice syslog: Note: removing MFC: 0.0.0.0 -> 224.168.100.1, InpVIf: 1
Nov 5 01:29:00 rlx-linux user.info syslog: igmpproxy: Add membership 224.168.100.1
Nov 5 01:29:00 rlx-linux user.debug syslog: Debu: adding MFC: 0.0.0.0 -> 224.168.100.1, InpVIf: 1
Nov 5 01:29:10 rlx-linux user.info syslog: igmpproxy: Drop membership 224.168.100.1
Nov 5 01:29:10 rlx-linux user.notice syslog: Note: removing MFC: 0.0.0.0 -> 224.168.100.1, InpVIf: 1
Nov 5 01:29:12 rlx-linux user.info syslog: igmpproxy: Add membership 224.168.100.1
Nov 5 01:29:12 rlx-linux user.debug syslog: Debu: adding MFC: 0.0.0.0 -> 224.168.100.1, InpVIf: 1
Nov 5 01:29:22 rlx-linux user.info syslog: igmpproxy: Drop membership 224.168.100.1

ip adresa 224.168.100.1 nepatri ziadnemu fyzickemu zariadeniu, jedna sa podla mna o nejaku multicastovu ip adresu. ked som na jednej Windows masine v sieti dal prikaz arp-a, zobrazilo mi aj tento zaznam:
224.168.100.1 01-00-5e-28-64-01 static

MAC adresy zacinajuce na 01-00-5e-... by mali byt multicastove. ako vidno z vypisu, zaznam je staticky. po flushnuti arp tabulky sa vytvoril znova ako staticky, takze tento interface je na Windows masine a multicasty teda posiela samotna windows stanica.

Wireshark potvrdil, ze sa skutocne jedna o multicastove packety IGMPv2.

podla vsetkeho to vytvara uplne zbytocny traffic v sieti, ktory vdaka tomu ze je to multicast, nasledne znasobuju aj dalsie zariadenia.

moja otazka znie: je to normalne? co to moze byt?

itnavody.sk