North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

MACs on PAIX

  • From: Matt Hempel
  • Date: Tue Nov 28 14:30:30 2000 
I'm using MAC accounting on our Fast E connection at the PAIX to do
per-peer traffic stats.  It worked great until we put in a GSR.  I don't

know why it worked before or if anything has changed since.

The stats aren't working now because the # of entries in the
MAC accounting table exceed 512 (a hard IOS limit).  The majority of
these aren't in the ARP table ... they are inbound without translation
... just layer 2 noise.
It seems odd to me that there are this many distinct addresses on the
same shared
segment.  Not to mention that the port isn't switched.

To wit:

0000.0000.0000(0  ):  110444951 packets, 27399M bytes, last: 80ms ago
0000.0003.0000(3  ):  9416 packets, 2738919 bytes, last: 455680ms ago
0000.037f.4129(20 ):  33 packets, 7700 bytes, last: 302129568ms ago

Pretty serious chunks of bandwidth.

There are a large group of these addresses that begin with 0000. --- are

these some sort of bridged translation?  Can you think of any other
reason that so many MACs would appear on the same port?

--matt hempel