wrote in message news:[EMAIL PROTECTED] > Any experience to share on the following problem? > > The CAM entries are changing continuously. There are not so many users > turning off their computers. Also, on two interfaces of a Catalyst 6509, > every 1 minute and 30 seconds there are a unexpected traffic that seems to > be Flooding (got with Sniffer).
you *might* be suffering a mac attack / cam overflow attack. Cisco sent something out the other day http://www.cisco.com/en/US/netsol/ns110/ns170/ns171/ns128/networking_solutio ns_implementation_white_paper09186a008014870f.shtml watch the wrap BTW, this is an interesting read for reasons other than cam overflow atttacks. > > SWITCH(enable) sh cam count dy > Total Matching CAM Entries = 2167 > SWITCH(enable) sh cam count dy > Total Matching CAM Entries = 2205 > SWITCH(enable) sh cam count dy > Total Matching CAM Entries = 2236 > SWITCH(enable) sh cam count dy > Total Matching CAM Entries = 2267 > SWITCH(enable) sh cam count dy > Total Matching CAM Entries = 2292 > SWITCH(enable) sh cam count dy > Total Matching CAM Entries = 2321 > SWITCH(enable) sh cam count dy > Total Matching CAM Entries = 2357 > SWITCH(enable) sh cam count dy > Total Matching CAM Entries = 2379 > SWITCH(enable) sh cam count dy > Total Matching CAM Entries = 2413 > SWITCH(enable) sh cam count dy > Total Matching CAM Entries = 2438 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=63720&t=63718 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
