Network Management

Hi everybody !

 

I'm wondering if it's normal to have a lot of STP packets when I analyse my network traffic with Wireshark (on 1003 packets, I have 823 STP packets) ?

 

Thank you so much for help me.

 

Regards

Hi Johbo,

 

There isnt a easy answer on this and your information is incompete.

823 STP packets in how much time?

 

A STP packet is a BPDU packet and is send per spanning-tree instance (or by cisco per vlan with PVST+). So how more instances you have, how more BPDU packets will send through your network :).

 

Normally i see one STP packet per spanning-tree instance per seconde.

 

Then time is an important factor, so how long is your capture?

 

But in fact... A STP packet is small as 480bits x 823packets brings you up to 395Kbit of data, and that is 49Kbyte of data :).

 

But before deepdive in packet analyze you should better look at the STP logs of your switch.

Hi mkk !

 

Thank you so much for you help and sorry of answer also late. For answer your questions :

 

1) Normally i see one STP packet per spanning-tree instance per seconde.

I have all the seconds, one STP packet with different destination :

The first is "Spanning-Tree (for bridges) and the second is PVST+, I don't know it's normal ?

 

2) Then time is an important factor, so how long is your capture?

The time for my capture and 6 mn for 1004 packets.

 

What do you think ?

 

Thank you so much.

 

Regards.

 

 

1000 packets in 6min is not that much.

 

PVST+ sends 1 BPDU per vlan. If you have more than 100 vlans your better of to choice for MSTP thats sends one BPDU per instance.

 

Why you troubleshoot this packets? Are you have some issues?

 

 

Ok ! Thanks for your explications. If I ask this it’s because when I analyzed my network, I saw all this STP packets and I asked me If this was normal ?

Now with your help, I understood this was correct.

I thank you for your help, this’s really kind !

Regards