We are monitoring trafic on a acces port which is connected to Heardbeat server port. So we redirect this trafic to the sniffer port, and we see traffic of all vlan. We don't understand because it is not broadcast and nor multicast, but unicast traffic from this vlan.
Is it all the unicast traffic of the VLAN, or just a few packets per second? It is quite normal for a certain amount of the unicast traffic to be flooded to all ports due to the aging algorithm on the mac forwarding table.
I think it's all the unicast traffic, because we have approximatively 20MB in one minute.
We have an aging time configurated by default to 300s.
If we increase the aging time what happened?
reguards
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
