how to decode the complex acl

shivlu jain · ‎09-26-2008

i am getting packets from the given source and destination. Can some one tell me how to decode it so that i can get the list of ip addresses.

source=0.27.129.1 destination=0.50.8.0

regards

shivlu

Giuseppe Larosa · ‎10-02-2008

Hello Shivlu,

I may be wrong but I don't see anything that needs to be further decoded here.

I agree these are strange IP addresses that shouldn't be seen in a network.

try to understand if these packets are real look for ARP entries and try to locate the devices that are using them.

Just an idea: they could be the result of two IPv6 hosts trying to auto-tunnel over IPv4 addresses and using the least significant part of IPv6 address as the IPv4 address.

Hope to help

Giuseppe