target audience

IGMP Query vs. Report: Understanding Multicast Communication

Internet Group Management Protocol (IGMP) is the backbone of IPv4 multicast communication. It allows routers to discover which hosts on a local network want to receive specific multicast traffic. Instead of flooding data to every device like a broadcast, or sending individual copies like a unicast, multicast delivers a single stream of data to a group of interested receivers.

To manage this efficiently, IGMP relies on a continuous exchange of two primary message types: Queries and Reports. Understanding the difference between them is key to managing network bandwidth and troubleshooting streaming media, IPTV, or discovery protocols. What is an IGMP Query?

An IGMP Query is a message sent by a multicast router (or a designated Layer 3 switch acting as an IGMP Querier) to ask hosts on the local network if they want to receive multicast traffic.

Think of an IGMP Query as a roll call or a poll. The router needs to know if any devices are still interested in a multicast group so it doesn’t waste bandwidth forwarding unnecessary data. Key Characteristics of Queries: Sent by: The Multicast Router / IGMP Querier.

Destination: Typically sent to the “all-systems” multicast address (224.0.0.1). Types of Queries:

General Query: Sent periodically to ask if any host is listening to any multicast group.

Group-Specific Query: Sent when a host leaves a group, asking if anyone else is still listening to that specific multicast address. What is an IGMP Report?

An IGMP Report (often called a Membership Report) is a message sent by a host (like a computer, smart TV, or IP camera) to inform the router that it wants to join or remain in a specific multicast group.

If the Query is the poll, the Report is the vote. It is the host’s way of saying, “Yes, I am here, and I want to receive this specific data stream.” Key Characteristics of Reports: Sent by: The Host / Client device.

Triggered by: A host initially joining a group, or a host responding to a Router’s General Query.

Destination: The specific multicast group address the host wants to join (or 224.0.0.22 in IGMPv3). Key Differences: IGMP Query vs. Report IGMP Query IGMP Report Originator Multicast Router (Querier) Host / Client Device Direction →right arrow →right arrow Purpose To discover active multicast groups To join or maintain group membership Frequency Periodic (Default: ~125 seconds) or triggered On-demand (joining) or in response to a query Destination IP 224.0.0.1 (All systems) The specific multicast group IP How They Work Together: The Membership Lifecycle

To see IGMP in action, consider how a host joins, maintains, and leaves a multicast session. 1. Joining a Group (Unsolicited Report)

When you open an IPTV application, your device immediately sends an unsolicited IGMP Report for that channel’s multicast group (e.g., 239.1.1.1). The router receives this and begins forwarding the video stream to your network segment. 2. Maintaining the Group (Query and Response)

Every few minutes, the router sends out a General Query to 224.0.0.1. Your device receives this query. Because it still wants to watch the video, it replies with an IGMP Report for 239.1.1.1.

(Note: To save bandwidth, IGMP uses a “Report Suppression” mechanism in v1 and v2. If multiple hosts want the same stream, the first host to reply causes the other hosts to cancel their reports, preventing the network from being flooded with redundant messages). 3. Leaving the Group (Leave and Group-Specific Query)

When you close the application, your device sends an IGMP Leave Group message (in IGMPv2/v3). The router doesn’t immediately stop the stream, because other devices might still be watching. Instead, the router sends a Group-Specific Query for 239.1.1.1. If no hosts respond with a Report within a short timeout period, the router stops forwarding the stream. The Role of IGMP Snooping

While Queries and Reports operate at Layer 3 (IP), Layer 2 switches also listen to these messages using a feature called IGMP Snooping.

By “snooping” on the IGMP Reports sent by hosts and the Queries sent by routers, a switch learns exactly which physical ports have active receivers. This prevents the switch from flooding multicast traffic to every single port, keeping your local network efficient and lag-free. Conclusion

IGMP Queries and Reports are the two halves of a conversation that keeps multicast networks functioning efficiently. The router queries to find out who is listening, and the hosts report back to claim their traffic. Together, they ensure that high-bandwidth data streams go exactly where they are needed—and nowhere else.

To help tailor more networking guides for your needs, let me know: