I've attached an Ethereal machine to the TIX switch and watching what is going on (broad- and multicast) for the past five hours.
Spanning-tree is pretty frustrating as when I filtered one the next popped up from another interface. So in the end I defined some general multicast filters in the Foundry: 1. block all multicast to MAC 0180.c200.0000 (Spanning-Tree) 2. block all multicast to MAC 0100.0ccc.cccc (CDP) 3. block all multicast to MAC 0100.0c00.0000 (more CDP) 4. block all multicast to MAC 0100.5e00.0005 (OSPF) None of this traffic will make it through TIX switch anymore since 20 minutes ago. The only stuff I still see being broad-/multicasted is ARP (surprise!), PIMv2 and IGMP (why?). I wont kill it so far as it doesn't represent any threat to the normal operation of the TIX peering matrix. The most strange thing I still see are MOPd (?) requests/announcements to MAC ab:0:0:2:0:0 from 0:1:96:84:38:80... -- Andre ---------------------------------------------- [EMAIL PROTECTED] Maillist-Archive: http://www.mail-archive.com/swinog%40swinog.ch/