Phantom Switches

[TekkyMatt]

About 2 months we had to get rid of 2 switches (3com 4226t). This morning I was going through some wireshark/ethereal captures and noticed that all of my switches are broadcasting for the IP's of the two switches that have gone, and doing it quite often. Since the switches were removed, all of our switches have had software updates and have been totally powered down (power cut). They all have identical config's so does anyone have any ideas what could be causing this?

 

Who has 10.0.2.250? Tell 10.0.2.XX

[richard.thomas]

Maybe they're missing their friends?

 

I'm presuming those switches haven't been replaced or the new switches don't have the same IP, Have you got any of the 3com management software installed anywhere?

[TekkyMatt]

No they havent been replaced, they and their IP no longer exist. I have 3NS installed on my laptop, nowhere else though. I just cant think what could be looking for them....

[srochford]

I've seen something similar before. Somewhere we have something that's trying to contact IP 10.0.0.3 - this hasn't existed for a long time but there are ARP packets for the address which I can't track down :-(

[ricki]

HI

 

I dont know if this helps but you can flush switches like the routing table and the arp cache. Have a look at http://support.3com.com/infodeli/tools/switches/ss3/32xx/dqa1750-0aaa01.pdf

 

I dont know if this helps any.

 

Richard

[TekkyMatt]

i've already tried deleteing all the learned addresses on the switches, it hasn't helped. I will try to flush them through telnet when I get in tmrw and i'll post the outcome here

 

Thanks

[TekkyMatt]

didnt do any good