cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2159
Views
0
Helpful
1
Replies

Cam Table Overflow attack

mahesh18
Level 6
Level 6

Hi Everyone,

Layer 2 attack   Cam table overflow floods the switch with bogus mac addresses

Say PC 1 connected to switch port 1

PC 2 connected to switch port 2

Switch has source mac of pc 1 and pc 2 on its cam table.

Now if someone connects to port 3 and flood the switch with bogus mac address now when new pc connects its mac address is flooded to all ports as switch ran out of ports.

does switch also floods the mac of PC  1 and 2 also?

Will ever mac address of PC  1 and 2 ever get flooded?

Regards

MAhesh

1 Accepted Solution

Accepted Solutions

cadet alain
VIP Alumni
VIP Alumni

Hi,

when the CAM table is overflowed the switch is acting like a Hub so yes all traffic should be flooded including the PC1 and PC2.

Regards

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.

View solution in original post

1 Reply 1

cadet alain
VIP Alumni
VIP Alumni

Hi,

when the CAM table is overflowed the switch is acting like a Hub so yes all traffic should be flooded including the PC1 and PC2.

Regards

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.
Review Cisco Networking products for a $25 gift card