Advertisement

04.10.2008 at 10:30AM PDT, ID: 23312651 | Points: 125
[x]
Attachment Details

Finding IP addresses in log files that are not part of our network

Asked by stevensims in Network Analysis Software, Network Routers, Networking Security Vulnerabilities

Tags: DLINK, DFL, 300

Found this in my log files on my Firewall/Router.

Source                 Destination
10.10.47.7            192.168.13.1                UDP : 137              DROP
10.10.47.7            192.168.254.1              UDP : 137             DROP
10.10.47.7            192.168.152.1              UDP : 137             DROP


10.10.47.7 is one of our 2003 Domain Controllers and the master browser. I dont know what the 192 address is from.

I ran wireshark and got the output below for one of the IP addreses

Source                   Destination          Protocol      Info
10.10.47.7             192.168.254.1     NBNS          name query response NBSTAT
192.168.254.1        10.10.47.7          NBNS          name query NBSTAT <00><00><00><00>......


Does anyone know what this is and is there a way i can find where this IP address is coming from?Start Free Trial
[+][-]04.10.2008 at 11:53AM PDT, ID: 21328131

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]04.10.2008 at 12:06PM PDT, ID: 21328240

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]04.10.2008 at 12:10PM PDT, ID: 21328286

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]04.14.2008 at 06:58AM PDT, ID: 21350035

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628