A gigabit uplink interface of a C3560 switch is congested.
Broadcast and multicast traffic is low.
Is it possible to find which MAC address congests this interface?
Solved! Go to Solution.
It's a trunk port.
Something consumes the 100% of the gigabit uplink (trunk) interface from time to time during the day and need to find who causes this.
You can find that way what IP using bandwidth until you have any NetFlow configured here. or enable ip accounting on the interface (not sure C3560 support check - have used long back those models)
if the each device connected to each port. check the utilization port based on the counters of the interface.
do you have any NMS in place so you can monitor the port?
Thank you for your reply. This is an old network with old 3560 and 2950 catalyst switches.
I think that none of them support mac accounting or netflow and i was wondering if there is any other way to find out.
I think the best way to find out is to disconnect port by port the hosts attached on the neighboring switch when the congestion occurs(because it occurs for several minutes) until the traffic returns to normal.
They installed a server for storing-archiving x-rays(PACS) just for testing.
The traffic was due to uploading/downloading huge amounts of pictures.
Thank you very much.