Apparently, bpdufilter leaks sometimes on some switches, and I have the packet traces to prove it. The switches are probably not supported, so replacements are likely in order. Anyone have an opinion of which cisco switches/IOS are guaranteed not to leak through bpdufilter?