[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference netcad::hub_mgnt

Title:DEChub/HUBwatch/PROBEwatch CONFERENCE
Notice:Firmware -2, Doc -3, Power -4, HW kits -5, firm load -6&7
Moderator:NETCAD::COLELLADT
Created:Wed Nov 13 1991
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:4455
Total number of notes:16761

2548.0. "Help!!! with Duplicate Addresses in HUBwatch" by SNOFS1::KHOOJEANNIE () Fri Jul 21 1995 07:21

    Does anyone know what the Find Duplicate Address application in
    HUBwatch is supposed to do?
    
    A customer of ours has run it on their network (300 PCs), and have a
    dozen PC MAC addresses coming up, each between 3 and 7 times.
    
    eg:
    
    MAC#1	IP Address DEChub900#1		Slot 1, Port 3 (900FP)
    MAC#1	IP Address DEChub900#2		Slot 3, Port B1 (900TM)
    MAC#1	IP Address DEChub900#3		Slot 5, Port 1 (900FP)
               
    MAC#2	IP Address DEChub900#2		...
    MAC#2	IP Address DEChub900#4		...
    
    etc
    
    For the dozen PCs showing up, the result is like a map of the
    modules that the PC is connected to.
    
    Any ideas?  All help would be greatly appreciated.
    
    Jeannie    
    Networks Sydney, Oz
    
    
    
T.RTitleUserPersonal
Name
DateLines
2548.1Not an Indicator of BadnessNETCAD::DRAGONFri Jul 21 1995 12:5924
    
    Jeannie,
    
    	Find Duplicate Addresses queries the agent in the HUBwatch Agents
        File to see if any of them are reporting that they have seen the
        same MAC address. If they have, then HUBwatch reports the locations
        being reported for that address. If you have a station (PC)
        connected to a port on a repeater, then the MAC address of that
        station will be reported by all ports which have received packets
        with that station's MAC as the source address, which is what you
        are seeing. 
    
        This is not an indication that anything is necessarily wrong. However, 
        if you see the MAC being reported off of more than one port on the 
        same repeater (for example), then this could indicate a problem
        such as a loop or >1 stations with the same MAC (curious if anyone
        has ever run into this?).
        
        It sound by what you have described that things are OK. If you look
        at the addresses reported and it looks like a map of repeater ports
        that the station is tied to then that's normal and healthy.
    
    Regards,
    Bob
2548.2But why some PCs and not others?SNOFS1::KHOOJEANNIEMon Jul 24 1995 05:2311
    Dear Bob, thanks very much for your quick answer.
    
    Do you know why only 12 of the 300 PCs are showing up - a lot more
    than 12 PCs are going through multiple repeaters.
    
    What determines which MAC addresses the agents report?
    
    Thanks again
    Jeannie
    
    
2548.3NETCAD::DRAGONMon Jul 24 1995 12:4024
    
    Jeannie,
    
    	The addresses are stored in erptrAddrDBPortAddrtable, which has a
        limited capacity, so that the repeaters may not be able to store
        all the addresses seen. Given this, for an address to show up
        as a duplicate it has to presently be in the table of 2 or more
        repeaters when they are queried. By the time the 2nd repeater's 
        agent is queried the address may have been replaced by that of another 
        station if the table was full. Also, according to the erptr MIB, 
        addresses which have not been seen for "a reasonable amount of time" 
        may be flushed. The size of the erptrAddrDBPortAddrtable and the
        existance of address flushing are implementation dependent. Perhaps
        someone could provide these implementation details.
    
        If the same addresses continually show up, then my guess would be
        that they are either the only or the heaviest talkers on the 
        Ethernet. If they are the heaviest talkers, then I'd expect to
        see other addresses show up occasionally.
    
    Hope this helps,
    Bob