Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1214
  • Last Modified:

Syslog 106016 on Cisco PIX

Hey Guys,

We are receiving a lot of Deny IP Spoof from messages on our PIX

106016 Deny IP spoof from (255.255.255.255) to 100.100.100.102 on interface inside.

The subnet on the inside interface is 192.168.2.0/24 so I’m unsure where to even start with tracking this down. Any help would be greatly appreciated
0
supportemea
Asked:
supportemea
  • 2
1 Solution
 
Istvan KalmarSenior Network EngineerCommented:
Hi,

there is a computer with 100.100.100.102 on your lan.. it sent a broadcast to all computer on the lan...
0
 
supportemeaAuthor Commented:
Thanks ikalmar, Is there a way of finding which port on our switches this device is plugged into ?

We are using Cisco 3560 and 2960 swtiches
0
 
Istvan KalmarSenior Network EngineerCommented:
yep you need to ser another pc to 100.100.100.103 and ping the 100.100.100.102 ...
 arp -a tells the mac address of the intruder....
0

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now