• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1225
  • Last Modified:

Syslog 106016 on Cisco PIX

Hey Guys,

We are receiving a lot of Deny IP Spoof from messages on our PIX

106016 Deny IP spoof from (255.255.255.255) to 100.100.100.102 on interface inside.

The subnet on the inside interface is 192.168.2.0/24 so I’m unsure where to even start with tracking this down. Any help would be greatly appreciated
0
supportemea
Asked:
supportemea
  • 2
1 Solution
 
Istvan KalmarHead of IT Security Division Commented:
Hi,

there is a computer with 100.100.100.102 on your lan.. it sent a broadcast to all computer on the lan...
0
 
supportemeaAuthor Commented:
Thanks ikalmar, Is there a way of finding which port on our switches this device is plugged into ?

We are using Cisco 3560 and 2960 swtiches
0
 
Istvan KalmarHead of IT Security Division Commented:
yep you need to ser another pc to 100.100.100.103 and ping the 100.100.100.102 ...
 arp -a tells the mac address of the intruder....
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Become a Leader in Data Analytics

Gain the power to turn raw data into better business decisions and outcomes in your industry. Transform your career future by earning your MS in Data Analytics. WGU’s MSDA program curriculum features IT certifications from Oracle and SAS.  

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now