We have two 6509 switches running HSRP.
We have everything seperated into it's own VLAN:
There are a total of about 40 VLANs created for everything.
We have MARS set up and it is picking up traffic originating from ip address 0.1.0.4 port 137 but using the workstation HSRP interface mac address.
The destination of the traffic is to different workstations (no pattern).
So it is is as if the HSRP virtual interface is sourcing traffic to different workstations, but using the ip address of 0.1.0.4.
One of the other network guys thinks it is a cisco bug, but if this were the case,
why wouldn't we see this on all of the HSRP interfaces?
Also, would a cisco bug source traffic on a netbios port?
Has anyone ever seen anything like this?