IGMP Traffic to 224.0.0.22 (2) – Why Is It Logging Constantly

EVERYONE
Lately, Norton’s 360 V25.5 Smart Firewall has been logging constant “IGMP Public Blocked 224.0.0.22 (2) etc” in Security History, even though nothing seems broken or slow on my end. I didn’t change any network settings, and this just appeared out of nowhere.I’ve seen others mention similar logs tied to multicast traffic—could this be a harmless system/service behavior Norton is flagging a little too aggressively?

Curious if anyone else is seeing this, or if there’s a way to suppress the log entries without disabling the firewall or creating unnecessary rules.

@majorbuzz By chance does your personal or ISP device have IGMP snooping as a feature and is it set as active? IGMP itself isn’t a security risk, if you are on Wifi is your network set to public? If so change it to private and restart the device. Recheck again to see if that has any affect.

SA

Hey there @SoulAsylum. I’m using a Windows 10 PC. To be honest, Firewalls are my weakest knowledge point. I have no idea if this computer or Xfinity has IGMP snooping, let alone if it is active. I have my wifi disabled on my gateway. I don’t know how it’s set. All I know is I haven’t messed around with anything like that. If you would be willing to walk me through this, I would be most appreciative my friend from V24 and V25 threads.
{Time passes: According to Google AI … Yes, Xfinity (Comcast) utilizes IGMP (Internet Group Management Protocol) snooping on their network.

Hello again to you as well. I have to boot up my laptop that has version 25.xx installed, live update Norton to the latest and check for the June Windows Updates as well. Then make it ready for a virtual meeting tomorrow morning. Allow me to have a look within that Norton install to see whether I see the IGMP snooping issue logged my side. I’m not seeing it on the older version I am using regularly which is 22.24.8.36. Hope to have a first look for you in a jiffy.

SA

Before I start looking around these are my settings on my TP-Link personal router, its setup as yours is. Wifi is disabled on the Verizon G3100 combo device and I use Ethernet plus Wifi on my router. These are the settings for IGMP in my personal router. I have NOT touched the IGMP settings in the Verizon side since I basically allow data through it and filter down stream via TP-link settings. You may want to have a look at your router settings as well. Typically these settings stay at the defaults to ensure gaming and streaming don’t overload the network for any one given device: Note- I do not have IPTV/VLAN enabled but DO have settings enabled for Multicast. VLAN tagging is better used within and designed for a business / corporate environment.

SA

1 Like

Thanks so much @SoulAsylum. Please take your time.
If you should see it over and over in your security history (my wife doesn’t, with the exact same setup), please tell me what you’re going to do about it. Cya later.

So I noticed that you appear to be on an ethernet connection when you are seeing these entries. I am on my personal laptop via Wifi for two hours now and a few restarts under my belt. Latest Windows updates are installed for Windows 11 Pro 24H2, finally. And Norton is version 25.5.10141.935, virus definitions set 250622-4 . So far I don’t see any IGMP logged entries in Norton history.

Check for Norton having changed your connection to public as it is showing that in your screenshot. Change it to private and re-start. Lets see if Norton changes it back to public again and those entries do fresh logging. If that happens Norton is the issue with your network security on ethernet. Make sure that in Windows settings your network type is set there as private as well.

SA

@SoulAsylum – Yes, both my wife and I run Windows 10 desktops. We are both hard-wired (Ethernet) into the same gateway. She has been appointed to Network 5, I’m on Network 3. I don’t know anything about this, as our computers are totally independent of each other and our wi-fi is off at the gateway. She doesn’t see this in her history. I checked gateway, Windows settings, and my Norton firewall says #3 is private. See below. This usually has started have I come out of sleep mode or boot up. I’m wondering if it’s some program I have. Also I’m surprise her network 5 is not listed under recent.

Boy am I tardy with follow up here. I do apologize, life gets in the way at times. Nevertheless, have you been updated to the latest 25.9.xxx release? If so does it correct the issues? Had you also repaired your Norton installation to see if that corrects the issue?

SA