NetFort Advertising

Troubleshoot Broadcast Storms and ARP Conflicts

Troubleshoot broadcast storms

Did you know you can use LANGuardian to troubleshoot Layer 2 (data link layer) issues such as broadcast storms and ARP conflicts?

A broadcast storm occurs when a buggy or malevolent host emits a continuous stream of broadcast packets. Because these packets must traverse each link in the network, a broadcast storm from a single host can slow down the network for all other hosts on the same subnet.

ARP conflicts occur when two hosts with different MAC addresses resolve to the same IP address. Usually this happens as a result of human error or a misconfigured DHCP implementation, but it can also happen as a result of ARP spoofing, which hackers often use as the opening for denial of service, session hijacking, or man-in-the-middle attacks.

LANGuardian provides two reports that give a breakdown of Layer 2 activity on your network:

  • Ethernet :: Top Broadcasters
  • Ethernet :: Traffic Distribution

With these reports, you can see quickly locate a device that is causing a broadcast storm or identify the source of an ARP spoofing attack.

If you have any questions about troubleshooting Layer 2 activity, or indeed any other aspect of network monitoring with LANGuardian, please contact us any time.