What's this?......"IGMP join received (239.192.152.143)"

peking97 · 25-10-2024 02:16AM #1

I'm seeing multiple and repeated entries of the above. Seems to have started around 9th Oct.

Eir FTTH Fibre box SagemCom

Screenshot 2024-10-25 at 01-53-41 eir fibre box.png

Anyone shed any light on this? TIA

Morpork · 25-10-2024 03:11AM

Can you see what port it's on? My guess it's a torrent application.

FishOnABike · 25-10-2024 06:30AM

Vould be IPTV, video coferencing, mutiplayer online gaming. Can you correlate the requests with activity on any of the devices you have connected to the network?

peking97 · 25-10-2024 07:07PM

https://www.boards.ie/discussion/comment/122760762#Comment_122760762

The only reports I see are those from the router log and it makes no mention of a port number so I don't know if there is an way I could expand those reports further. FWIW I don't use torrents…..malware perhaps?

peking97 · 25-10-2024 07:08PM

https://www.boards.ie/discussion/comment/122760816#Comment_122760816

I don't use any of those so, no, I can't.

Cuddlesworth · 25-10-2024 07:21PM

Its usually a torrent application. Keep in mind that things like a network drive or TV box can be running these applications. Or those fire sticks with the apps people pay for, which are really just torrent apps in the background.

muffinhead · 26-10-2024 08:19PM

Read this:

https://en.wikipedia.org/wiki/Local_Peer_Discovery

peking97 · 27-10-2024 07:38PM

https://www.boards.ie/discussion/comment/122766692#Comment_122766692

Well I did have a read of it but must admit a lot of it went over my head!! I'm still at a loss to understand what changed on Sept 20th last. No entries logged before that date. There was some TR69 activity earlier on 20th Sept. which I understand is Eir Remote Mgmt. traffic. Perhaps they changed something either deliberately or in error!

peking97 · 27-10-2024 07:47PM

https://www.boards.ie/discussion/comment/122763452#Comment_122763452

OK Understood but I switched any/all of those OFF for test purposes and it still persists. Will keep digging!

What's this?......"IGMP join received (239.192.152.143)"

Comments