I tried applying all of the suggestions from last week and I am still
getting this alarm. Neither of these addresses are on my LAN.
ALARM NO: 4
DATE: Mon 2002-12-09 08:38:19
INTERFACE: PROTECTED (xl1)
INTERFACE TYPE: Protected
ALARM TYPE: Possible spoof
IP PACKET: UDP [169.254.78.209/137]-->[199.191.128.104/53] l=52
DETAILED DESCRIPTION:
Return interface for IP packet is different than arrival.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
To subscribe to the digest version first unsubscribe, then
e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archive of the last 1000 messages:
http://www.mail-archive.com/[email protected]
