I've attached an Ethereal machine to the TIX switch and watching
what is going on (broad- and multicast) for the past five hours.

Spanning-tree is pretty frustrating as when I filtered one the next
popped up from another interface. So in the end I defined some general
multicast filters in the Foundry:

 1. block all multicast to MAC 0180.c200.0000 (Spanning-Tree)

 2. block all multicast to MAC 0100.0ccc.cccc (CDP)

 3. block all multicast to MAC 0100.0c00.0000 (more CDP)

 4. block all multicast to MAC 0100.5e00.0005 (OSPF)


None of this traffic will make it through TIX switch anymore since
20 minutes ago.

The only stuff I still see being broad-/multicasted is ARP (surprise!),
PIMv2 and IGMP (why?). I wont kill it so far as it doesn't represent
any threat to the normal operation of the TIX peering matrix.

The most strange thing I still see are MOPd (?) requests/announcements
to MAC ab:0:0:2:0:0 from 0:1:96:84:38:80...

-- 
Andre
----------------------------------------------
[EMAIL PROTECTED] Maillist-Archive:
http://www.mail-archive.com/swinog%40swinog.ch/

Reply via email to