Yup, haven't really been able to follow up on this thread, but got a busy with my thesis work. Anywayz, the ARP flooding was due to W32.Welchia worm. Now that most systems have been patched up, all's back to normal.

Regarding what Networker had said earlier about limiting switch throughput, or shutting down the self-learning mechanism, would that really help, given that ARP messages are by default broadcasts? Will read up on that though, seems I've forgotten me basics..

--Scim