You may be on to something but I'd have to research it.  The switch and
NMS are on the same subnet and, now that I think about it, the NMS is
connected to the same switch that I'm on.  

Hmm.....that makes this even stranger!  Since this is unicast traffic
destined for the switch itself, I wonder why it would ever flood that
traffic out any port.  Hmmm....

Very ponderous.

Another oddity is that I'm seeing directed broadcast traffic from a LAN
subnet that exists two hops away over our WAN and there is no ip helper
address configured on that router.  I have *no* idea how that could be
happening!

These LAN analyzers point out the most interesting things!  ;-)

John

>>> Priscilla Oppenheimer  7/17/01 2:50:22 PM >>>
You would also see flooded unicast traffic until the switch learns the

correct port to use for a destination MAC address. That might not
explain 
the SNMP traffic though. That just sounds like a leak!?

Priscilla

At 04:40 PM 7/17/01, John Neiberger wrote:
>I'm running a demo of some LAN analysis software from my PC which is
>connected to a non-SPAN port.  So, I should only see unicast traffic
>to/from my workstation, broadcasts, and multicasts, right?  right!
>
>However, from time to time I see unicast packets that are neither
>destined for or originated from my machine.  In one particular case
I'm
>seeing SNMP traffic from our NMS to the switch I'm connected to.
>There's not a lot of this occurring, but since it shouldn't happen
ever
>I'm worried that I might have a defective switch or at least a
"feature"
>in the switch software.
>
>Have any of you seen this behavior before?
>
>Thanks,
>John
________________________

Priscilla Oppenheimer
http://www.priscilla.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=12718&t=12714
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to