After A Broadcast Storm, How To Confirm?

[ksbolton1]

Hello all. I have what I think may be a strange question. I've seen a large amount of alerts from my NMS and I'd like to cross broadcast storm off my list of possible root causes. I'm wondering, what evidence does a broadcast storm leave behind? I have a good idea of how to detect them during the storm but what if the loop was already corrected ? How do I confirm that the alerts I've seen were or were NOT due to a broadcast storm? 

[Dennis Mink · Accepted solution]

what nms?  solarwinds? nagios?

i would look at the physical interface of the switch an see how fast the received broadcast are clocking up

[ksbolton1]

Oh, it's SolarWinds NPM and NTA.

The counters on the switch interface, they would still be relevant after the storm has ended? Also thank you very much for your quick reply.