The traffic from sfp-sfpplus1 goes (nearly) full to sfp-sfpplus2 AND sfp-sfpplus3 (sfp-sfpplus4 not used). Since this traffic is all unicast this is wrong. The Switch->Host-List contains only 1-3 shortly displayed entries. It must be ~300. Undes Bridge->Hosts this all, but only these from Switch-Host are flagged "DE", the other only "D". If I disable HW-Offlooading for bridge1 then all traffic flows korrect, but high CPU-Load und not full throuput possible.
This behaviar is similar on all my CRS328. Has everyone an idea?

The config is:
----------------------------------------
# by RouterOS 6.46.6
#
# model = CRS328-4C-20S-4S+
/interface bridge
add name=brCpe3115 protocol-mode=none
add name=brCpe3116 protocol-mode=none
add name=brCpe3117 protocol-mode=none
add name=brCpe3118 protocol-mode=none
add name=brCpe3119 protocol-mode=none
add name=brCpe3120 protocol-mode=none
add name=brCpe3121 protocol-mode=none
add name=brCpe3122 protocol-mode=none
add name=brCpe3123 protocol-mode=none
add name=brCpe3124 protocol-mode=none
add name=brCpe3125 protocol-mode=none
add name=brCpe3126 protocol-mode=none
add name=brCpe3127 protocol-mode=none
add name=brCpe3128 protocol-mode=none
add name=brCpe3129 protocol-mode=none
add name=brCpe3130 protocol-mode=none
add name=brCpe3131 protocol-mode=none
add name=brCpe3132 protocol-mode=none
add name=brCpe3133 protocol-mode=none
add name=brCpe3134 protocol-mode=none
add name=brCpe3135 protocol-mode=none
add name=brCpe3136 protocol-mode=none
add name=brCpe3137 protocol-mode=none
add name=brCpe3138 protocol-mode=none
add admin-mac=xxxxxxxxxxx ageing-time=15m auto-mac=false name=bridge1 \
protocol-mode=none
/interface vlan
add interface=bridge1 name=vlan1 vlan-id=1
add interface=bridge1 name=vlanCpe3115 vlan-id=3115
add interface=bridge1 name=vlanCpe3116 vlan-id=3116
add interface=bridge1 name=vlanCpe3117 vlan-id=3117
add interface=bridge1 name=vlanCpe3118 vlan-id=3118
add interface=bridge1 name=vlanCpe3119 vlan-id=3119
add interface=bridge1 name=vlanCpe3120 vlan-id=3120
add interface=bridge1 name=vlanCpe3121 vlan-id=3121
add interface=bridge1 name=vlanCpe3122 vlan-id=3122
add interface=bridge1 name=vlanCpe3123 vlan-id=3123
add interface=bridge1 name=vlanCpe3124 vlan-id=3124
add interface=bridge1 name=vlanCpe3125 vlan-id=3125
add interface=bridge1 name=vlanCpe3126 vlan-id=3126
add interface=bridge1 name=vlanCpe3127 vlan-id=3127
add interface=bridge1 name=vlanCpe3128 vlan-id=3128
add interface=bridge1 name=vlanCpe3129 vlan-id=3129
add interface=bridge1 name=vlanCpe3130 vlan-id=3130
add interface=bridge1 name=vlanCpe3131 vlan-id=3131
add interface=bridge1 name=vlanCpe3132 vlan-id=3132
add interface=bridge1 name=vlanCpe3133 vlan-id=3133
add interface=bridge1 name=vlanCpe3134 vlan-id=3134
add interface=bridge1 name=vlanCpe3135 vlan-id=3135
add interface=bridge1 name=vlanCpe3136 vlan-id=3136
add interface=bridge1 name=vlanCpe3137 vlan-id=3137
add interface=bridge1 name=vlanCpe3138 vlan-id=3138
/interface ethernet switch port
set 0 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 1 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 2 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 3 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 4 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 5 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 6 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 7 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 8 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 9 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 10 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 11 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 12 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 13 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 14 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 15 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 16 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 17 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 18 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 19 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 20 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 21 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 22 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 23 ingress-rate=100000000 limit-unknown-multicasts=true \
limit-unknown-unicasts=true
set 24 limit-unknown-multicasts=true limit-unknown-unicasts=true
set 25 limit-unknown-multicasts=true limit-unknown-unicasts=true
set 26 limit-unknown-multicasts=true limit-unknown-unicasts=true
set 27 limit-unknown-multicasts=true limit-unknown-unicasts=true
/interface list
add name=discovery
/interface bridge filter
add action=drop chain=forward mac-protocol=vlan vlan-id=3115
add action=drop chain=forward mac-protocol=vlan vlan-id=3116
add action=drop chain=forward mac-protocol=vlan vlan-id=3117
add action=drop chain=forward mac-protocol=vlan vlan-id=3118
add action=drop chain=forward mac-protocol=vlan vlan-id=3119
add action=drop chain=forward mac-protocol=vlan vlan-id=3120
add action=drop chain=forward mac-protocol=vlan vlan-id=3121
add action=drop chain=forward mac-protocol=vlan vlan-id=3122
add action=drop chain=forward mac-protocol=vlan vlan-id=3123
add action=drop chain=forward mac-protocol=vlan vlan-id=3124
add action=drop chain=forward mac-protocol=vlan vlan-id=3125
add action=drop chain=forward mac-protocol=vlan vlan-id=3126
add action=drop chain=forward mac-protocol=vlan vlan-id=3127
add action=drop chain=forward mac-protocol=vlan vlan-id=3128
add action=drop chain=forward mac-protocol=vlan vlan-id=3129
add action=drop chain=forward mac-protocol=vlan vlan-id=3130
add action=drop chain=forward mac-protocol=vlan vlan-id=3131
add action=drop chain=forward mac-protocol=vlan vlan-id=3132
add action=drop chain=forward mac-protocol=vlan vlan-id=3133
add action=drop chain=forward mac-protocol=vlan vlan-id=3134
add action=drop chain=forward mac-protocol=vlan vlan-id=3135
add action=drop chain=forward mac-protocol=vlan vlan-id=3136
add action=drop chain=forward mac-protocol=vlan vlan-id=3137
add action=drop chain=forward mac-protocol=vlan vlan-id=3138
add action=accept chain=output ip-protocol=udp mac-protocol=ip out-interface=\
sfp-sfpplus4
add action=drop chain=output out-bridge=!bridge1
add action=drop chain=forward packet-type=multicast
/interface bridge port
add bridge=bridge1 interface=sfp-sfpplus1 trusted=true
add bridge=bridge1 interface=sfp-sfpplus2 trusted=true
add bridge=bridge1 interface=sfp-sfpplus3 trusted=true
add bridge=bridge1 interface=sfp-sfpplus4 trusted=true
add bridge=brCpe3115 interface=vlanCpe3115
add bridge=brCpe3115 interface=sfp1
add bridge=brCpe3116 interface=vlanCpe3116
add bridge=brCpe3116 interface=sfp2
add bridge=brCpe3117 interface=vlanCpe3117
add bridge=brCpe3117 interface=sfp3
add bridge=brCpe3118 interface=vlanCpe3118
add bridge=brCpe3118 interface=sfp4
add bridge=brCpe3119 interface=vlanCpe3119
add bridge=brCpe3119 interface=sfp5
add bridge=brCpe3120 interface=vlanCpe3120
add bridge=brCpe3120 interface=sfp6
add bridge=brCpe3121 interface=vlanCpe3121
add bridge=brCpe3121 interface=sfp7
add bridge=brCpe3122 interface=vlanCpe3122
add bridge=brCpe3122 interface=sfp8
add bridge=brCpe3123 interface=vlanCpe3123
add bridge=brCpe3123 interface=sfp9
add bridge=brCpe3124 interface=vlanCpe3124
add bridge=brCpe3124 interface=sfp10
add bridge=brCpe3125 interface=vlanCpe3125
add bridge=brCpe3125 interface=sfp11
add bridge=brCpe3126 interface=vlanCpe3126
add bridge=brCpe3126 interface=sfp12
add bridge=brCpe3127 interface=vlanCpe3127
add bridge=brCpe3127 interface=sfp13
add bridge=brCpe3128 interface=vlanCpe3128
add bridge=brCpe3128 interface=sfp14
add bridge=brCpe3129 interface=vlanCpe3129
add bridge=brCpe3129 interface=sfp15
add bridge=brCpe3130 interface=vlanCpe3130
add bridge=brCpe3130 interface=sfp16
add bridge=brCpe3131 interface=vlanCpe3131
add bridge=brCpe3131 interface=sfp17
add bridge=brCpe3132 interface=vlanCpe3132
add bridge=brCpe3132 interface=sfp18
add bridge=brCpe3133 interface=vlanCpe3133
add bridge=brCpe3133 interface=sfp19
add bridge=brCpe3134 interface=vlanCpe3134
add bridge=brCpe3134 interface=sfp20
add bridge=brCpe3135 interface=vlanCpe3135
add bridge=brCpe3135 interface=combo1
add bridge=brCpe3136 interface=vlanCpe3136
add bridge=brCpe3136 interface=combo2
add bridge=brCpe3137 interface=vlanCpe3137
add bridge=brCpe3137 interface=combo3
add bridge=brCpe3138 interface=vlanCpe3138
add bridge=brCpe3138 interface=combo4
/ip neighbor discovery-settings
set discover-interface-list=discovery
/interface list member
add interface=bridge1 list=discovery
add interface=vlan1 list=discovery
/ip cloud
set update-time=false
/ip dhcp-client
add dhcp-options=Classid,Vendor,hostname,clientid disabled=false interface=\
vlan1
/ip ssh
set allow-none-crypto=true forwarding-enabled=remote
/snmp
set enabled=true
/system clock
set time-zone-autodetect=false time-zone-name=Europe/Berlin
/system logging
add action=remote topics=critical,error
/system ntp client
set enabled=true
/system routerboard settings
set boot-os=router-os

I have searched on the problem. Just I have found a dependency on the /interface bridge ageing-time=15m setting.
With a value of 14:47 or below it works. 14:48 or above produces the decript error.
What is this for a toll feature? If the switch-Chip then report an error on setting a value above or set the max value, but NOT 0 (or a "module 14:48"-value).
Also suchs limits should be documented.