It would be all unicast traffic measured in 1 second intervals , not just unknown destinations, so you might want to try setting up a rate limit with permit actions to see if you are having bursts of traffic.
Brian -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vincent De Keyzer Sent: lunedì 2 luglio 2007 18.01 To: 'Francois Ropert'; [email protected] Subject: Re: [c-nsp] Unicast storms > > I have configured _unicast_ storm-control on our LAN recently, and it > > keeps kicking in all of the time (something like 50 times per hour). > > > > The configured treshhold is quite high (10% - that's 100 Mbps on GigE > > ports!...). > > > > I believe there is something wrong - where do I start troubleshooting > > this? > > > Read the rxload% and input in show interface command to see if are you > really under the 10% assuming you haven't snmp nor netflow. Well, I have snmp, but this is not my understanding of unicast storm: as far as I understand, unicast storm is defined as traffic with an unknown destination MAC address. I don't think you can see this with 'sh int' or SNMP, can you? Vincent _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
