12-09-2017 02:59 AM - edited 03-08-2019 01:03 PM
I capture some traffic via wireshark and i see flood of arp from 1 svi interface that is configured with HSRP between 2 Nexus5000 Switches. both of the svi the active svi and the passive svi are flooding my network with ARP.
in the arp packet the sender mac and ip address that is sending the arp is the mac and ip of the hsrp active svi interface and the passive svi interface.
what could cause the svi interface to flood arp traffic?
your help needed.
Thanks
12-09-2017 04:43 AM
Is there an established ARP table for the hosts on this VLAN? Looks like the ARP requests are sequential. Could it be that the network of the SVIs are constantly being scanned from something external?
12-09-2017 12:21 PM
Hi...this Svi is for are cisco ip phones.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: