[c-nsp] Arp flood?

[FXCM - Brandon Palmer]

I'm seeing some rather devastating traffic on my network at the moment.  The symptoms are that my ARP cache keeps getting filled with "Incomplete" entries (even for IP addresses that are up).  In debug mode,  the ARP requests are coming from the switch itself (6506,  sup2,  12.1.22 native).  Goggling for it suggest that maybe this is a nmap flood somehow?  If that were the case, I could understand my ARP table filling w/ Inc entries for IPs that are not up,  but what about the ones that are?  Memory use is normal,  CPU use is normal.  I've tried to tcpdump on a span port for my uplinks and don't see traffic destin for the empty IP addresses so i'm not sure where the requests are coming from.  Network is clean of all other devices that could be conflicting IP.

Any suggestions?

Thanks folks.

- Brandon

_____________________________________________________________________________________________________________________________
FXCM, L.L.C.® assumes no responsibility for errors, inaccuracies or omissions in these materials. FXCM, L.L.C.® does not warrant the accuracy or completeness of the information, text, graphics, links or other items contained within these materials. FXCM, L.L.C.® shall not be liable for any special, indirect, incidental, or consequential damages, including without limitation losses, lost revenues, or lost profits that may result from these materials. All information contained in this e-mail is strictly confidential and is only intended for use by the recipient.