Cisco 2950T Unknown IPX Traffic

[jonas21]

Heya,

i am having some strange broadcast traffic from my 2950T with latest IOS (Version 12.1(13)EA1):
(feteched via tcpdump)

05:25:53.349834 0:c:85:7b:9f:c1 0:c:85:7b:9f:c1 9000 60:
0000 0100 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000

05:25:53.346952 0:c:85:7b:9f:c1 > 1:0:c:0:0:0 sap aa ui/C len=65
0001 000c cccc cc00 0c85 7b9f c100 22aa
aa03 0000 0c20 0401 0001 0005 0000 0200
0503 0003 0005 a500 0400 0a00 0c85 7b9f
c100 0000 0000 0000 0000 0000 006e ba23
49

05:26:53.360246 0:c:85:7b:9f:c1 > 1:0:c:cc:cc:cc sap aa ui/C len=35
0005 0000 0200 0503 0003 0005 a500 0400
0a00 0c85 7b9f c100 0000 0000 0000 0000
0000 00

(repeating all over)

Could someone tell me what this is and how to turn it off?

Thanks,
Jonas

 

[kittenhammer]

>1:0:c:cc:cc:cc

IIRC, that is a multicast address aimed at every Cisco device on the segment...

>1:0:c:0:0:0

...and this is a multicast address used by the Inter-Switch Link feature.

 

[jonas21]

Hi,

thanks, how do i turn this off? (Is it even possible?)
I am not using multicast in any way.

Jonas