3550 Switch generates a huge number of ARP reply packets.

[hyukin.kwon]

Hi all,

A 3550 Switch is generating a great number of ARP reply packets to a host. actually the speed is 1000pps. you can check the sample output in the attachment file.

Is it a ARP spoofing or ARP cache poisoning attack ? The weird thing is that a 3550 switch not a host is generating packets .

Welcome any possibilities...

TIA

[m.matteson]

maybe is a bad nic on the host. swap out?

[hyukin.kwon]

Thanks matteson,

I will try, but actually the NIC is a converter which is converting RS-232c to ethernet.

I think there is a problem on that..

Anyway thanks...