Issue with monitor IOS Switch - 1

[RookThis]

Has anyone seen this before. I am spanning a port using the monitor session command to initiate a data capture. I am mirroring the physical port:
monitor session 1 source interface Gi2/11
monitor session 1 destination interface Gi8/19

interface GigabitEthernet2/11
no ip address
logging event link-status
load-interval 30
flowcontrol receive desired
switchport
switchport access vlan 323
switchport mode access
spanning-tree portfast

On the sniffer capture I am seeing unicast traffic sourced by some machine on some other network segment destined for a machine other than the machine that I am looking at on port g2/11. I'm not spanning the vlan, so I'm puzzled.

Thoughts?

 

[vipergg]

Sounds like maybe you are getting some kind of unicast flooding going on . This would explain the flooding if indeed that is what is going , besides this don't know what it would be .

 

[vipergg]

sorry about the 1st post . Sounds like maybe you are getting some kind of unicast flooding going on . This would explain the flooding if indeed that is what is going , besides this don't know what it would be .

http://cisco.com/en/US/partner/prod...oducts_tech_note09186a00801d0808.shtml#causes

 

[RookThis]

Thanks for the information, you always have an answer to things, and I appreciate the assistance.

 

[RookThis]

This may turn out to be a bug: CSCef72013

unicast flooding due to purging of non-pi RM entry with dfc3-pfc3

Thx viper for steering me in the right direction.