[techtalk] router/switch question

Xp0nential Xp0nential Xp0nential at root-core.com
Thu Feb 7 09:06:33 EST 2002


Do you have a brand name? or something ? like CISCO 5000 bla bla
maybe that will help us figure out what it is.......

PS: switches are as evil as hubs, specially that you can arp poison behind a switch ;)

Xp0nential

--- "Raven, corporate courtesan" <raven at oneeyedcrow.net> wrote:
>Heya --
>
>Quoth Tania M. Morell (Wed, Feb 06, 2002 at 12:18:40AM -0500):
>> No, I'm sure it's a switch and not a hub.  ;)   This activity thing doesn't
>> happen with any of my other computers so I think it may have something to do
>> with the network config on this particular machine but I don't know enough
>> about networks/ips/broadcasts/netmasks/etc to know right off what it is. I
>> guess I'll have to tinker around until I figure it out.
> 
>	It may be the app, too.  (I forget what you said you were doing
>when you saw all that activity.)  Can you run the app on a different
>machine and see if you see the same behaviour?  If so, the app is
>probably just one that uses a lot of broadcasts, and that's why
>you're seeing that activity everywhere.
>
>	Switches 101:  Switches are often called smart hubs.  This is
>because they learn where devices are (Mac address/IP address blah is off
>port foo) by listening to frames they recieve.  So, if they get a frame
>from MAC address foo on port 1 destined for MAC address bar, they store
>the knowledge that MAC address foo is off port 1 in their forwarding
>table.  The next time they have a frame for foo, they can only send it
>out of port 1 rather than spamming all ports with it.  (If switches
>recieve a frame for an unknown MAC address, they'll generally forward it
>out all ports except the one it came in on.)  As they pass frames, they
>learn where the devices on the local network are, and they send less
>frames to all ports, and more for the particular port that connects to
>the destination device.
>
>	The exception to this -- broadcast frames.  These are frames
>that are *supposed* to go to everyone on the local subnet (a division of
>IP space).  So broadcast frames will appear on every port except the one
>they came in on, every time.  It sounds like this is what's happening
>with your setup.  Broadcast frames have many uses for protocol designers
>-- find all machines on the local network, send a message to all (Router
>going down in five minutes!), search for a particular computer that you
>know is connected but don't know where it is (akin to shouting "Hello?
>Jane?" down every hallway until she shows up), aanouncing available
>services to other devices on a network (a la Novell servers and
>AppleTalk printers), things like that.
>
>	Some applications are more broadcast-intensive than others.  It
>all depends on the software, the protocol stack, and how it was
>programmed.
>
>	If any of this doesn't make sense, please ask.
>
>Cheers,
>Raven
> 
> 
><NCC> Derek says, "anyone interested in buying a Game Cube?"
><NCC> Path says, "joking?"
><NCC> Robert says, "How much? : )"
><NCC> Raven says, "Can I put Linux on it?"
>_______________________________________________
>Techtalk mailing list
>Techtalk at linuxchix.org
>http://mailman.linuxchix.org/mailman/listinfo/techtalk

_____________________________________________________________
[Root-Core Network] - [www.root-core.org] - Free E-mail



More information about the Techtalk mailing list