title: track source of IGMP query
body: <p>I have some igmp query that comes each 2 minutes out of bond0 interface.</p>
  
  <p>IP 0.0.0.0 > 224.0.0.1: igmp query v2.</p>
  
  <p>Is it possible to track which process/programm is making this query?</p>
  
  <p>From the checking I found that the source MAC address of the query is the mac address of bond0 address.</p>
  
  <p>Since this query takes a couple CPU cycles, I am not sure I will find it in ps or netstat. I think I need some tracking tool like perf or systemtap. I am new in the world of debugging and tracking, so I need some help to find a correct command and parametrs.</p>
  
  <p>Thanks.</p>