Spanning-Tree Protocol (STP) loop or misconfiguration causes a Catalyst 5000 to log %MLS-4-MOVEOVERFLOW:Too many moves messages.
Messages similar to the following are output on a Catalyst 5000 switch:
05/13/1998,08:55:10:MLS-4:Too many moves, stop MLS for 5 sec!(20000000)
05/13/1998,08:55:15:MLS-4:Resume MLS after detecting too many moves
These syslog messages indicate that the switch is relearning one or more MAC addresses on multiple ports in rapid succession. For example, on an access switch with two uplinks to the core of the network, the switch might learn a given MAC address first on one uplink and then on the other very rapidly.
Move means a MAC/VLAN in the Content Addressable Memory (CAM ) table changes its port index. Usually, this is caused by the following :
Misconfiguration: For example, two packet streams to two different ports (on the same VLAN) carry the same MAC address. This causes the switch to learn the same MAC/VLAN from two different ports in turns.
STP loops: Loops where the same frame comes and goes between ports. The switch keeps learning the same MAC/VLAN from different ports.
Determine the correct source (port) of the host MAC address.
Issue the show mls notification and show looktable commands to provide the port and mac address information. Sample command output is below.
Cat5k> (enable) show mls notification
1: (0004e8e6-000202ce) Noti Chg TA e8e6 OI 2ce (12/15) V1 !--- Mod/port and VLAN. 2: (0004e8e6-000202cd) Noti Chg TA e8e6 OI 2cd (12/14) V1
In this example, ports 12/15 and 12/14, both in VLAN 1, have the same Table Address (TA) of e8e6. To find the MAC address associated with the table address, issue the show looktable e8e6 command. Sample command output is below.