Last time I looked this usually happens when the MAC address expires from
the CAM table, that what it's called on Cisco's.
If the destination address is not in the bridge forwarding table, in Cisco's
case this is known as the CAM table. Since the switch does not know which
port the packet needs to be sent to, it sends them to all ports. Once a
system responds to a packet an entry get's created in the CAM table and you
shouldn't see any more traffic.
diana
-----Original Message-----
From: Guy Harris [mailto:guy@xxxxxxxxxx]
Sent: July 25, 2001 2:36 PM
To: Tom Greaser
Cc: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] Seeing non broadcast / multicast packets
> Im running a total switch network. But sometimes i pickup some non
> broadcast / mulicast packets up on my sniff with ethereal...????
What are the destination MAC addresses of the packets in question?
(Presumably they're not being sent to or from the machine running
Ethereal.)
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users