Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1226
  • Last Modified:

wireshark log analysis icmp problem

In my asa firewall I get a ton of icmp traffic on a ip address internal that is not on my network  Looks like spoofing or something   but i get a ton of icmp traffic out to different web sites on same subnets... any ideas see picture
packet-picture.JPG
0
ckness
Asked:
ckness
  • 2
  • 2
1 Solution
 
PugglewuggleCommented:
Something is wrong with the PC 192.168.1.50
192.169.45.x is the Windows IPv4 link failure loopback address - it is selected randomly when a cable is connected to a NIC but it isn't functioning as it should or isn't getting an IP via DHCP.
Check that out.
I seriously doubt this is an attack - just a malfunction on 192.168.1.50.
Cheers!
0
 
cknessAuthor Commented:
great answer problem is there is no pc on my network in that subnet nor is it routable so i can not trace route it,  whats the best way to determine where it is.  Also if its a loop back why does it go out to the internet to resolve ping,,,,
0
 
PugglewuggleCommented:
That's what I was wondering too... Like i said though, if a PC is malfunctioning there's no telling what it will do.
How many machines are we dealing with?
0
 
cknessAuthor Commented:
turned out to be a phone system behind a router that i was not routing for on lan/wan but allowed them to get internet..... took the gateway off machine took away traffic...
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now