cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1048
Views
0
Helpful
2
Replies

%C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: Log Message 4507

Arthur Kant
Level 1
Level 1

Gentlemen,

I am receiving the following errors on our core switch that I am concerned about.  I have read other support posts on this here at Cisco but I still have some questions:

- This is not "normal" broadcast traffic, that my switch is logging correct and is an error that should be followed up on correct? Especially due to the amount of packets I am getting dropped.

- I assume this is a faulty NIC or a mis configured host spewing this traffic and I want to track it down.  Any suggestions for tracking down the source as I can't seach mac tables for source of 00:00:00 ..etc

.Jul 11 17:56:59.157: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 44482 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Gi5/5 in vlan 151

.Jul 11 23:56:59.476: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 129151 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Gi5/5 in vlan 151

.Jul 12 05:56:59.864: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 216587 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Gi5/5 in vlan 151

.Jul 12 14:43:26.261: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 126595 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Gi5/5 in vlan 151

.Jul 12 21:27:25.867: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 41927 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Gi5/5 in vlan 151

.Jul 13 03:27:26.702: %C4K_L2MAN-6-INVALIDSOURCEADDRESSPACKET: (Suppressed 200481 times)Packet received with invalid source MAC address (00:00:00:00:00:00) on port Gi5/5 in vlan 151

Regards,

Kenny

2 Replies 2

p.mcgowan
Level 3
Level 3

looks like the rpoblem is coming from port Gig5/5

What is connected to this port? is it a switch? if so do you see simillar errors in that switch?

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Arthur,

check if there are new vmware instances not configured via the gi5/5, new VM not configured start with source address of all 0s that is seen as invalid on the LAN switch.

I have already seen this in a customer's network, it shouldn't be a real issue

Hope to help

Giuseppe

Review Cisco Networking for a $25 gift card