sniffer capturing unicast traffic on port where port mirroring disabled

[0dalthouse]

We have a sniffer plugged into a 10/100 port on a 4006. Port mirroring is not enabled on this port, so we only expect to see broadcast traffic. In addition to BPDUs, ARPs, BOOTPs, etc... we are seeing unicast traffic (http, ldap) between two hosts plugged into other ports on the switch. It's not all the traffic between the two hosts, just a small subset. Why would this traffic show up at all?

[efrahim]

this is due to unicast flooding.

Look at the following url

http://www.cisco.com/warp/customer/473/143.html