[c-nsp] 2970 turns into a hub for a few moments

Vincent De Keyzer vincent at dekeyzer.net
Wed Dec 27 11:40:50 EST 2006


> > This can be caused by a number of things, such as something clearing the
> > cam (CLI, SNMP, or certain conditions that flush the cam as a side
> > effect) or most likely the cam table is being filled up, either
> > intentionally by malware (e.g., dsniff) or unintentionally by a bad NIC
> > or transmission errors generating erroneous source MAC addresses.
> 
> A FDB flush following an STP TC would seem much more probable. Vincent
> -- what does the rest of the layer 2 network look like?

Kevin,

what do you mean exactly?... There are in total five 2970s, in some sort of
hub&spoke topology, and out these five, two have three Cisco Express 500
connected to each. From one of the 2970 there is also one link going to
another layer2 network with 4503s, 2950s and 3548s; only a few VLANs are
allowed on this trunk.

Does this help? What else do you want to know?

Vincent



More information about the cisco-nsp mailing list