We have instances where users will loop our network. Usually we get alerts from snmp traps to highlight this, occasionally we don’t. Does anyone have any good alerts that they can share that they use to capture these events? Ideally I’d be looking if traffic through a switch suddenly went up by a factor of x over the previous time window but I don’t think that’s doable in LIbreNMS (unless anyone can point me otherwise).
Cheers