BroadcastStormen

BroadcastStormen is a term used in information technology to describe a network condition in which broadcast traffic floods a local area network, causing congestion and potential degradation of performance. The term is often used in Scandinavian IT communities as a compound noun formed from “broadcast” and “storm” with the definite suffix, reflecting its non-formal, descriptive nature rather than a specific protocol.

Causes of a broadcast storm can include network loops created by misconfigured switches, failed or disabled spanning tree protocols, and rapid topology changes. Other common factors are rogue devices or misbehaving hosts that repeatedly generate broadcast messages, misconfigured DHCP or ARP traffic, and multicast amplification. Broadcast storms can spread quickly across VLANs if there are bridging or switching errors, leading to widespread congestion.

Symptoms of BroadcastStormen typically involve high switch CPU utilization, port saturation, excessive collision and error rates, increased latency, and widespread packet loss. End-user services such as file sharing, voice over IP, or application traffic may become unresponsive during an event.

Prevention and mitigation focus on network design and operation. Key measures include enabling and properly tuning Spanning Tree Protocol (STP), Rapid STP or MSTP to prevent loops; enabling storm control and rate limiting on access ports; segmenting networks with VLANs and appropriate ACLs; and monitoring traffic patterns to detect abnormal broadcast activity early. Troubleshooting often involves checking switch logs, validating topology, inspecting ARP and DHCP traffic, and using packet captures to identify the source of excessive broadcasts.

See also: broadcast storm, spanning tree protocol, storm control, network loop.