Unicast Flooding Detection Bundle

bundle

#1

###Bundle details and download

https://www.extrahop.com/community/bundles/cshaw/unicast-flooding-detection-bundle/

###Description

Unicast flooding describes the situation when a switch receives a packet whose destination address is not in the switch’s address table (or the address table is full), so the switch “floods” the packet to all other ports on the domain. While this is the intended behavior to ensure that the packet reaches its destination, it can indicate problems or inefficiencies in the network configuration if it occurs in excess.

This bundle contains a trigger and visualization to help you find potential occurrences of unicast flooding.


#2

Can this bundle be made useful for a device that is set to discover devices only at Layer 3?