Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1229
  • Last Modified:

wireshark log analysis icmp problem

In my asa firewall I get a ton of icmp traffic on a ip address internal that is not on my network  Looks like spoofing or something   but i get a ton of icmp traffic out to different web sites on same subnets... any ideas see picture
packet-picture.JPG
0
ckness
Asked:
ckness
  • 2
  • 2
1 Solution
 
PugglewuggleCommented:
Something is wrong with the PC 192.168.1.50
192.169.45.x is the Windows IPv4 link failure loopback address - it is selected randomly when a cable is connected to a NIC but it isn't functioning as it should or isn't getting an IP via DHCP.
Check that out.
I seriously doubt this is an attack - just a malfunction on 192.168.1.50.
Cheers!
0
 
cknessAuthor Commented:
great answer problem is there is no pc on my network in that subnet nor is it routable so i can not trace route it,  whats the best way to determine where it is.  Also if its a loop back why does it go out to the internet to resolve ping,,,,
0
 
PugglewuggleCommented:
That's what I was wondering too... Like i said though, if a PC is malfunctioning there's no telling what it will do.
How many machines are we dealing with?
0
 
cknessAuthor Commented:
turned out to be a phone system behind a router that i was not routing for on lan/wan but allowed them to get internet..... took the gateway off machine took away traffic...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now