monitor of flooded packets

Unanswered Question
Feb 11th, 2009

Hi,

one switch, 10 acces ports in vlan 10, on P1 a pc with sniffer, on P2 a pc with "source packets", i monitor in tx on the ports P3-P10, to the P20 in witch is connected another sniffer.

A packet entering the P2 with a unknown mac address is flooded on all the ports. I see it on the P1 sniffer, and i will see once on the SPAN sniffer of 8 times?

Thanks

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Giuseppe Larosa Wed, 02/11/2009 - 02:53

Hello Ciprian,

yes replications are possible SPAN for efficiency reasons doesn't track the frames.

Are you using as SPAN source vlan 10 or the 8 physical ports ?

Hope to help

Giuseppe

Giuseppe Larosa Wed, 02/11/2009 - 09:14

Hello Ciprian,

using Vlan 10 as source might be a way to see less copies of same unknown unicast frame but I'm not sure.

Hope to help

Giuseppe

Actions

This Discussion