monitoring multiple mac address on an interface

tpelley

Does any one know a a way to get Orion NPM to generate an event message or alert message when multiple MAC Addresses are detected on a monitored interface?

I am trying to get NPM to alert me to the possibility of rogue hubs on the network. It seems to me that looking for multiple macs would be a good way to accomplish this. If anyone knows of a better way please let me know.

Thanks

Terry Pelley
Network Analyst
Ottawa-Carleton District School Board
Ottawa, Ontario
Canada