I had two situations this week where my uplink provider had to disable our link because their router identified a broadcast storm. Unfortunately, they can't provide more information about the source of the problem.
What is the best way to identify what's causing this issue?
I have a Vyatta router between the uplink provider and my network. Is running "tcpdump broadcast" and logging it a viable solution?
This way maybe i could at least have a log and identify the IPs with more broadcast traffic if this issue happen again.