traffic from the other ports

Johnramz · ‎09-17-2008

I ran wireshark on my computer today and I am seeing traffic from the rest of the users when I should only be seeing/listening to in/outbound traffic destined to my system. For example I was seeing MSN traffic many other users among other protocols. my system is connected to a 2950 switch port.

According to what I know this should not happen? Could anyone guide me as to where I should start looking at the switch configuration?

Thanks

John

nbarodia · ‎09-17-2008

It is normal to see broadcast traffic sent by a source in the same vlan as the port where wireshark is used to sniff traffic.

However, if traffic is unicast, that would indicate unicast flooding in network.

For more on unicast flooding, check here:

http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a00801d0808.shtml#