On 09/19/2012 05:05 AM, Alex Kisakye wrote:
> Hi all,
> I have recently started having violation mixup with my clients
> for example:
> A user comes in with a P2P violation, the mac address on the pf 
> violation page is 11:22:33:44:55:66 but the actual mac on the client 
> laptop is 21:31:41:51:61:71 [completely different].
> My thoughts were that maybe a client is issued an IP address that 
> formally had a violation....? Am not entirely sure whats going on.

Yes it could be. 11:22:33:44:55:66 is a very sketchy MAC address. What
was the IP associated with this MAC at the time?

And what IP did 21:31:41:51:61:71 have?

-- 
Olivier Bilodeau
[email protected]  ::  +1.514.447.4918 *115  ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to