The MAC address I always get is the Sonicwall's. As I mentioned this increase started on 8/18 when SoBig started to attack.
I will also check with my users to see if anyone has upgraded AOL on their PC recently.
Thanks,
Kevin
------------------ Kevin Bachelder
Microsoft Certified Systems Engineer (MCSE) - Windows NT 4.0 Microsoft Certified Systems Administrator (MCSA) - Windows 2000 Citrix Certified Administrator (CCA) CompTIA A+ Certified Computer Repair Technician (A+)
At 10:34 AM 8/28/2003, you wrote:
I will bet the computer with the MAC address listed is running AOL.
I need to pursue this issue.
When did you start seeing this and did the user download the new version of AOL?
John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Kevin Bachelder > Sent: Thursday, August 28, 2003 7:11 AM > To: [EMAIL PROTECTED] > Subject: RE: [SonicWALL]- IP Spoof Attacks > > Hey John, > > Yes, probably 7 out of 10 times. > > Kevin > > ------------------ > Kevin Bachelder > > Microsoft Certified Systems Engineer (MCSE) - Windows NT 4.0 > Microsoft Certified Systems Administrator (MCSA) - Windows 2000 > Citrix Certified Administrator (CCA) > CompTIA A+ Certified Computer Repair Technician (A+) > > > > At 08:36 PM 8/27/2003, you wrote: > >Is the IP address on the LAN that is in the report start with 172? > > > >John Tolmachoff MCSE CSSA > >Engineer/Consultant > >eServices For You > >www.eservicesforyou.com > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > > > Behalf Of Kevin Bachelder > > > Sent: Monday, August 25, 2003 1:30 PM > > > To: [EMAIL PROTECTED] > > > Subject: [SonicWALL]- IP Spoof Attacks > > > > > > Hi everyone, > > > > > > Since the start of the SoBig.F wave (8/18) we have been getting a > > > significant increase in the amount of "IP spoof detected" attacks. We > >used > > > to get 2-3 of these per week and since 8/18 we are getting 3-4 a day. > > > > > > Are other people seeing this as well? > > > > > > Thanks in advance, > > > > > > Kevin > > > > > > ------------------ > > > Kevin Bachelder > > > > > > Microsoft Certified Systems Engineer (MCSE) - Windows NT 4.0 > > > Microsoft Certified Systems Administrator (MCSA) - Windows 2000 > > > Citrix Certified Administrator (CCA) > > > CompTIA A+ Certified Computer Repair Technician (A+) > > > > > > --- > > > [This E-mail scanned for viruses by Declude/F-Prot AV] > > > > > > > =============================================================== > > > ==================================== > > > To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email > >put > > > the following: unsubscribe sonicwall your_name > > > The archive of this list is at > >http://www.mail-archive.com/sonicwall%40peake.com/ > > > > > > > > >--- > >[This E-mail scanned for viruses by Declude/F-Prot AV] > > > > > >To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email > >put the following: unsubscribe sonicwall your_name > >The archive of this list is at > >http://www.mail-archive.com/sonicwall%40peake.com/ > > --- > [This E-mail scanned for viruses by Declude/F-Prot AV] > > =============================================================== > ==================================== > To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put > the following: unsubscribe sonicwall your_name > The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ >
--- [This E-mail scanned for viruses by Declude/F-Prot AV]
To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name
The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/
--- [This E-mail scanned for viruses by Declude/F-Prot AV]
=================================================================================================== To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/
