With IPHost Network Monitor you can run simple snmp requests against a Cisco device in your network.
dot12InNullAddressedFrames
dot12 In Null Addressed Frames
1.3.6.1.3.63.1.2.1.8
This object is a count of null addressed frames received on this interface. This counter is incremented by one for each frame received on this interface with a destination MAC address consisting of all zero bits. Both void and training frames are included in this counter. Note that since this station would normally not receive null addressed frames, this counter is only incremented when this station is operating in promiscuous mode or in training.
Back to DOT12-IF-MIB MIB page.
IPHost Network monitor allows you to monitor dot12InNullAddressedFrames on Cisco device via the SNMP protocol. Download IPHost Network Monitor (500 monitors for 30 days, 50 monitors free forever) to start monitoring Cisco optical switches right now.