troubleshooting Question

Attack ?

Avatar of soffcec
soffcecFlag for Iceland asked on
RoutersAnti-Virus AppsTCP/IP
10 Comments1 Solution646 ViewsLast Modified:
I have Windows 2003 router

I am having lot of drop on NIC with IP 10.0.1.254

When I run Windump I get following pakcets (9000 + pr/sec)

07:24:00.320690 IP 192.168.1.1.445 > 10.0.1.210.63136: R 781344400:781344400(0) win 0
07:24:00.320792 IP 192.168.1.1.445 > 10.0.1.210.63136: R 781344400:781344400(0) win 0

No interface have the IP 192.168.x.x and I am not using it anywhere
The IP 10.0.1.210 have not been online for more than 2 days.

This starts every several hours and it runs for about 10-20 min each time.

Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 10 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 10 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros