1. Nokia (Alcatel-Lucent) SR OS Layer 2 Services and Bridging Guide, Release R12.0, Section 7.6 “MAC Flooding (MAC Explosion)”, pp. 342-343: “MAC flooding occurs when a large number of frames with unique source MAC addresses are received … creating an explosion of new MAC entries.”
2. Nokia SR OS Layer 2 Services and Bridging Guide, Release R12.0, Section 7.7 “MAC Move Protection”, p. 350: “MAC move (also called MAC flapping) is the repeated withdrawal and relearning of the same MAC address on different ports/services.”
3. Aalto University, CS-E4180 “Advanced Topics in Networking,” Lecture notes on Layer-2 security, slide 18: distinguishes ‘MAC flooding/explosion’ from ‘MAC flapping’ (single MAC moving between ports).
These sources collectively confirm that MAC explosion involves many new MAC addresses being learned, whereas withdrawal and relearning of the same MAC address describes MAC flapping.