A common mistake is to assume that seeing lots of broadcasts traffic
in a trace = a high rate of broadcasts.
Let's say I took a trace and out of 100 packets, 50 of them were STP.
That might seem like a lot. 50% of my traffic is STP! But if my
trace is 100 seconds long, that means that I'm seeing one tiny STP
packet every 2 seconds, which would NOT be a lot. Basically, the more
"idle" the link you're monitoring is, the higher the RATIO of
broadcasts to unicast traffic will tend to be. Psychologically,
newbies tend to interpret these as "floods" or "lots of traffic" when
they're not even close.
-Ian
On Fri, Apr 9, 2010 at 12:10 PM, Martin Visser <martinvisser99@xxxxxxxxx> wrote:
I presume you are saying that you are seeing too many STP packets on your
network. What is too many to you? I would expect to see a STP BPDU every 2
seconds from the switch I connect to. Depending on the STP mode you are
using you might see a STP BPDU on every VLAN you have configured on that
switch, and you would see each and every one on the 802.1q trunks connecting
them.
Regards, Martin
MartinVisser99@xxxxxxxxx
On Fri, Apr 9, 2010 at 9:10 AM, Kelik <kelik.networks@xxxxxxxxx> wrote:
Dear all,
I want to know why there is so many STP protocol in my wireshark?
Thanks & Regards
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe