08-07-2003 11:23 AM - edited 03-02-2019 09:26 AM
No matter where I plug into, I see one-to-one traffic (host-to-host) not broadcasts. It seems like there is a switch or router broadcasting this traffic. Please point me in a better direction I cant come up with any other ideas.
08-07-2003 12:26 PM
Who are the hosts on the network that are implementing this one-to-one traffic?
08-08-2003 09:44 AM
real world address -> workstation
The traffic is oneway. I don't see the workstation talking back
08-07-2003 10:53 PM
Hi,
check MAC addresses in the frames. Aren't they multicasts or somehow strange? Maybe the hosts are using some special application to communicate (Symantec Ghost, PGP, e.g.)?
Regards,
Milan
08-08-2003 09:47 AM
The MAC's are not multicast or broadcasts. How would an application produce this traffic?
08-08-2003 12:53 AM
It could be unicast flooding. There are several possible reasons for this, so search Cisco.com for the term.
-A
08-08-2003 08:19 AM
What type of device are you plugging into?
08-08-2003 10:13 AM
2950
08-11-2003 12:02 PM
Which Sniffer software are you using ?
If you are using the Microsoft's Free Network Monitor.. it can only monitor one - one traffic..
just like a switch based network.. but if you sniff with the full version you will get the full prmoiscious capability..
08-20-2003 09:35 AM
NAI - SNIFFER PRO
08-25-2003 10:50 PM
I encountered the same Problem. I've got sniffer pro too, and with a c3550G-48 12.1(11)EA1, I had the same pbm. I moved to IOS 12.1(12c)EA1 And I have no longer unicast frames. It was not flooding because there was only a few unicast frames arriving on my port
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide