Switch traffic abnormality alarm method and device

The embodiment of the invention provides a switch traffic abnormality alarm method and device. The method comprises the following steps: obtaining a port traffic data packet of a current to-be-detected port in a switch; comparing the port flow data packet with port alarm data packets of a plurality of ports, and determining a port alarm data packet matched with the current to-be-detected port; wherein the port alarm data packet comprises a unique identifier of the switch, a port identifier, at least one flow threshold set for the port and alarm content set for each flow threshold; and when theflow value passing through the port in the port flow data packet of the current to-be-detected port is matched with a certain flow threshold value of a matched port alarm data packet, alarm information is sent out, and the alarm information carries alarm content set for the flow threshold value. And a plurality of alarm thresholds can be set, so that the thresholds can be adjusted according to different service character