[nsp] multicast flows and dev/null

[Jared Mauch]

On Thu, Feb 05, 2004 at 08:58:14PM +0200, Hank Nussbacher wrote:
> At 11:38 AM 04-02-04 -0500, Jared Mauch wrote:
> >On Wed, Feb 04, 2004 at 05:26:38PM +0100, Francisco Gracia wrote:
> >> Hi,
> >>
> >> I am afraid I am seeing the same issue you saw in your network and cause 
> >of
> >> your posted message of Mon Aug 4 19:27:44 EDT 2003:
> >>
> >
> >        the address you show is the 'sdr' (aka sap) multicast group.
> >
> >        this is a dense-mode multicast group that is flooded across the
> >entire network in order to broadcast announcements about active multicast
> >sessions.
> 
> I know all that.  I just don't understand why it is nullrouting some of the 
> flows to that address:
> AT1/1/0.34    207.75.164.245  Null          224.2.127.254   11 0405 2693   
> 277
> AT1/1/0.34    129.132.39.155  Null          224.2.127.254   11 0405 2693   
> 101
> AT1/1/0.34    193.190.113.20  Null          224.2.127.254   11 8006 2693  
> 2374
> -Hank

	It's not null routing them.  This is "just the way" it shows up
in the netflow data.

	- Jared


-- 
Jared Mauch  | pgp key available via finger from jared at puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.