I've got a network that has a number of VLAN's on it, one VLAN is used to bridge between two remote locations over a LES circuit and I've been monitoring that VLAN interface and discovered that there isn't much traffic being registered on it. I started to monitor the physical interface and got a much higher amount of traffic being transferred.
I appreciate that when monitoring this vlan (vlan2) on one switch it is only going to register data passing that interface on that switch so I won't see a full picture of traffic on that VLAN but I'm also only monitoring one port on that switch.
In order for clients to get from one network to the other they have to route via this VLAN interface, so I would have expected to see as much traffic entering and leaving the VLAN interface as there is the physical interface.
Any ideas why the figures are so different?