We are having some strange activity on the network, with intermittent slowing down. Wireshark scans produce multiple results from the same source:
Ethernet II, Src: fe:80:00:00:00:00 (fe:80:00:00:00:00), Dst: 59:de:e6:c9:98:55 (59:de:e6:c9:98:55)
Any initial thoughts?
asked 26 Mar '14, 02:59
Neither of those addresses are well known addresses, so it could be
Please check the switch logs and CAM table of your switches to figure out the switch port where the sending device is attached to the switch. Wireshark won't be able to help you, unless you see some clear text messages in the frames that help to identify the sending device.
answered 26 Mar '14, 09:02
Kurt Knochner ♦
edited 26 Mar '14, 09:03