<div>
Thanks ikalmar, Is there a way of finding which port on our switches this device is plugged into ?<br />
<br />
We are using Cisco 3560 and 2960 swtiches
</div>


<div>
yep you need to ser another pc to 100.100.100.103 and ping the 100.100.100.102 ...<br />
&nbsp;arp -a tells the mac address of the intruder....
</div>


<div>
<div class="content wysiwyg-content">
Hey Guys,<br />
<br />
We are receiving a lot of Deny IP Spoof from messages on our PIX<br />
<br />
106016 Deny IP spoof from (255.255.255.255) to 100.100.100.102 on interface inside.<br />
<br />
The subnet on the inside interface is 192.168.2.0/24 so I’m unsure where to even start with tracking this down. Any help would be greatly appreciated<br />

</div>
</div>


Hey Guys,

We are receiving a lot of Deny IP Spoof from messages on our PIX

106016 Deny IP spoof from (255.255.255.255) to 100.100.100.102 on interface inside.

The subnet on the inside interface is 192.168.2.0/24 so I’m unsure where to even start with tracking this down. Any help would be greatly appreciated


Thanks ikalmar, Is there a way of finding which port on our switches this device is plugged into ?

We are using Cisco 3560 and 2960 swtiches

yep you need to ser another pc to 100.100.100.103 and ping the 100.100.100.102 ...
 arp -a tells the mac address of the intruder....

Syslog 106016 on Cisco PIX

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.