An Unexpect Number of Client Connection Records

It was mentioned today that at one customer site they were noticing a
high number of client connections during the late evening when they
expected nobody was really connecting on the network.

One explination might be as follows:

>It looks like you are polling your switches. So remember in the night
>time when the machines are idle (No traffic) the MAC Address is aged out
>of the switch. We treat this a a DISCONNECT for the client. Now assume
>that the machine needs to go verify a DHCP address so it does a
>broadcast. The switch hears the MAC and next poll cycle we see the MAC.
>We treat this a CONNECT Event. This cycle can happen over and over.
>
Received on Tue Aug 05 2003 - 16:52:41 EDT