Solved

wireshark log analysis icmp problem

Posted on 2008-10-13
4
1,220 Views
Last Modified: 2013-11-29
In my asa firewall I get a ton of icmp traffic on a ip address internal that is not on my network  Looks like spoofing or something   but i get a ton of icmp traffic out to different web sites on same subnets... any ideas see picture
packet-picture.JPG
0
Comment
Question by:ckness
  • 2
  • 2
4 Comments
 
LVL 12

Expert Comment

by:Pugglewuggle
ID: 22708858
Something is wrong with the PC 192.168.1.50
192.169.45.x is the Windows IPv4 link failure loopback address - it is selected randomly when a cable is connected to a NIC but it isn't functioning as it should or isn't getting an IP via DHCP.
Check that out.
I seriously doubt this is an attack - just a malfunction on 192.168.1.50.
Cheers!
0
 

Author Comment

by:ckness
ID: 22710542
great answer problem is there is no pc on my network in that subnet nor is it routable so i can not trace route it,  whats the best way to determine where it is.  Also if its a loop back why does it go out to the internet to resolve ping,,,,
0
 
LVL 12

Accepted Solution

by:
Pugglewuggle earned 500 total points
ID: 22710567
That's what I was wondering too... Like i said though, if a PC is malfunctioning there's no telling what it will do.
How many machines are we dealing with?
0
 

Author Closing Comment

by:ckness
ID: 31505759
turned out to be a phone system behind a router that i was not routing for on lan/wan but allowed them to get internet..... took the gateway off machine took away traffic...
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question