Description

This article explains the log DDOS_PROTOCOL_VIOLATION alarm for IPMCAST-miss for Juniper Networks for QFX5100 Series devices.

Symptoms

You are observing the following logs on your device:

Mar 10 12:26:03.876 2023 SWITCH jddosd[2279]: %DAEMON-4-DDOS_PROTOCOL_VIOLATION_SET: Warning: Host-bound traffic for protocol/exception IPMCAST-miss:aggregate exceeded its allowed bandwidth at fpc 0 for 444 times, started at 2023-03-10 12:26:03 UTC

 

Solution

The log DAEMON-4-DDOS_PROTOCOL_VIOLATION_SET: Warning: Host-bound traffic for protocol/exception IPMCAST-miss:aggregate means that the amount of IP multicast traffic (Unknown IPv4 and IPv6 multicast packets), aggregated has exceeded the allowed bandwidth. One of the possible reasons for this is due to IGMP snooping not being configured.

 

Modification History

2023-04-12: KB created.

Related Information

https://www.juniper.net/documentation/us/en/software/junos/security-services/topics/ref/statement/protocols-edit-ddos-qfx-series.html