During a network problem last week, I noticed that the OIDs for broadcasts/multicasts are missing in the templates for switches (in our case the HP Enterprise template).
We had the problem that a Lenovo computer that was switched off was flooding our network with IPV6 multicast packets.
This blog describes the problem from last week.
I am of the opinion that these OIDs should also be monitored.
The problem with a broadcast is that a possible default trigger would then trigger an alarm for all network ports.
How do you deal with broadcast/multicast detection?
We had the problem that a Lenovo computer that was switched off was flooding our network with IPV6 multicast packets.
This blog describes the problem from last week.
I am of the opinion that these OIDs should also be monitored.
The problem with a broadcast is that a possible default trigger would then trigger an alarm for all network ports.
How do you deal with broadcast/multicast detection?