I setup SPAN port in cat 6509, and use a Sniffer Pro to get traffic flow. However, the VLAN1 seems to have problem such as broadcast / multicast Storm, high octets/s and high utilization in Sniffer alert. The most of broadcast / multicast is happen in trunking (fiber port) in 802.1q to another Cat switch. My question is this type of broadcast is normal to trunk port? Also does STP multicast will increase the utilization? Will STP aging helps in multicasting issues?
Thanks,
SL