Broadcast storms

We have instances where users will loop our network. Usually we get alerts from snmp traps to highlight this, occasionally we don’t. Does anyone have any good alerts that they can share that they use to capture these events? Ideally I’d be looking if traffic through a switch suddenly went up by a factor of x over the previous time window but I don’t think that’s doable in LIbreNMS (unless anyone can point me otherwise).


You can only compare the values of the current poll to previous poll so it’s probably not really what you want.