A common mistake is to assume that seeing lots of broadcasts traffic
in a trace = a high rate of broadcasts.
Let's say I took a trace and out of 100 packets, 50 of them were STP.
That might seem like a lot. 50% of my traffic is STP! But if my
trace is 100 seconds long, that means that I'm seeing one tiny STP
packet every 2 seconds, which would NOT be a lot. Basically, the more
"idle" the link you're monitoring is, the higher the RATIO of
broadcasts to unicast traffic will tend to be. Psychologically,
newbies tend to interpret these as "floods" or "lots of traffic" when
they're not even close.
-Ian
On Fri, Apr 9, 2010 at 12:10 PM, Martin Visser <martinvisser99@xxxxxxxxx> wrote:
> I presume you are saying that you are seeing too many STP packets on your
> network. What is too many to you? I would expect to see a STP BPDU every 2
> seconds from the switch I connect to. Depending on the STP mode you are
> using you might see a STP BPDU on every VLAN you have configured on that
> switch, and you would see each and every one on the 802.1q trunks connecting
> them.
> Regards, Martin
>
> MartinVisser99@xxxxxxxxx
>
>
> On Fri, Apr 9, 2010 at 9:10 AM, Kelik <kelik.networks@xxxxxxxxx> wrote:
>>
>> Dear all,
>> I want to know why there is so many STP protocol in my wireshark?
>>
>> Thanks & Regards
>>
>> ___________________________________________________________________________
>> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
>> Archives: http://www.wireshark.org/lists/wireshark-users
>> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>>
>> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
>
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
