Hi there,

I have the problem on my CCR1009 that packets are send permanently on all VLAN-Ports with 424bps.
As you can see in the picture all VLAN-Ports of SFP-1 are affected.
In the next second the same transmission happens on all VLAN-Ports of ether3 and ether4.
This happens alternating each second.

I torched such a packet. src is empty and dst is 0.0.0.0

Is there a loop or is there possibly any misconfiguration?

Any ideas?

Regards,
horstkevin

You can use sniffer to actually sniff the packet and analyze it in wireshark, to see what it really is.

I suspect (R)STP packets, but best is sniff packets to be sure

I'd say it's CDP messages to 01:00:0C:CC:CC:CC.
Check your discovery settings and adjust your discovery interface list to just the interfaces really needed for discovery.
-Chris

Edit: After re-reading the post in terms of timing and looking at the amount of bridges (I now assume that there's a bridge for each vlan) makes me agree with @CZFan that it's RSTP as well.two seconds is the default hello-interval and it makes perfect sense.
You should have RSTP running on your untagged bridge only, all subsequent vlans will follow the state of the their master interface - unless you have Cisco switch gear running PVST.

-Chris

Hi there,
thx for your replies. You were right! I sniffed some packets and could see via wireshark that the Protocols are STP, MNDP, CDP and LLDP.

So - I must say that I dont have much knowledge about these protocols but as far as I could read here https://wiki.mikrotik.com/wiki/Manual:I ... Properties it seems to be normal.

Regards,
horstkevin