General discussion


Spoofing address

By tzutzasialbu ·
Hey folks,

I started getting these spoofing messages in my Sonicwall Pro 200 and it is really weird.

05/09/2006 12:34:31.800 IP spoof detected, 138, LAN, 138, WAN MAC address: 00.0D.

I disabled the subnet a long while ago and today these messages start showing in my log.

Any ideas?


This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by oldbag In reply to Spoofing address

How many systems do you have? The clue is that you have a MAC address to go to. If you have a small network, do ipconfig /all on all systems and try to find the one with the physical address that matches. Once you have that, you can start troubleshooting the machine that is causing the error.

Collapse -

by tzutzasialbu In reply to

Thank you for your answer! I found the faulty NIC. When I disabled the subnet, I had one machine with a static IP address in the 192.168.7.x subnet and I forgot to change it.

Collapse -

by tzutzasialbu In reply to Spoofing address

This question was closed by the author

Back to Security Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums