Thanks for all your help and recommendations, I really appreciate it. The next question is what to look for when you run a sniffer like tcpdump. How do you know something is wrong, most of the information we get from tcpdump and wireshark is overwhelming and searching through all that information can be daunting.
Are there any filters on tcpdump and/or wireshark that can detect broadcast storms? What are the common problems that can affect a network running motorola devices on a flat network.
Recently, we had a weird issue that took out all of our CMMs, they all froze and only a manual reboot could bring them up again. We had no clue where to look because immediately we had this problem, the entire network went down. We run a NDS called OSSIM and found out that there was alot of MAC addresses changes from certain clients, could this lead to anything?