What's this?......"IGMP join received (239.192.152.143)"

peking97

I'm seeing multiple and repeated entries of the above. Seems to have started around 9th Oct.

Eir FTTH Fibre box SagemCom

Screenshot 2024-10-25 at 01-53-41 eir fibre box.png

Anyone shed any light on this? TIA

Morpork

Can you see what port it's on? My guess it's a torrent application.

FishOnABike

Vould be IPTV, video coferencing, mutiplayer online gaming. Can you correlate the requests with activity on any of the devices you have connected to the network?

peking97

https://www.boards.ie/discussion/comment/122760762#Comment_122760762

The only reports I see are those from the router log and it makes no mention of a port number so I don't know if there is an way I could expand those reports further. FWIW I don't use torrents…..malware perhaps?

peking97

https://www.boards.ie/discussion/comment/122760816#Comment_122760816

I don't use any of those so, no, I can't.

Cuddlesworth

Its usually a torrent application. Keep in mind that things like a network drive or TV box can be running these applications. Or those fire sticks with the apps people pay for, which are really just torrent apps in the background.

muffinhead

Read this:

https://en.wikipedia.org/wiki/Local_Peer_Discovery

peking97

https://www.boards.ie/discussion/comment/122766692#Comment_122766692

Well I did have a read of it but must admit a lot of it went over my head!! I'm still at a loss to understand what changed on Sept 20th last. No entries logged before that date. There was some TR69 activity earlier on 20th Sept. which I understand is Eir Remote Mgmt. traffic. Perhaps they changed something either deliberately or in error!

peking97

https://www.boards.ie/discussion/comment/122763452#Comment_122763452

OK Understood but I switched any/all of those OFF for test purposes and it still persists. Will keep digging!