Hello. I work at a relatively small Client site where they have about 10 production VLAN's which are routed at a Core 4506 sw with a SUPII+ blade.
I do audits for protocol activity within each of these VLAN's by setting up the appropriate Port Monitor session on the switch and then capturing the traffic with Wireshark or Sniffer.
Irrespective of which VLAN I am in, I see alot of PVST+ traffic. I took a look at a couple of the frames, and they did not seem to be topology changes within ST.
Is it normal to see this much traffic being broadcast? The destination address is 01:00:0c:cc:cc:cd. thanks.