How can identify this device?

june_encarnacion · ‎11-03-2009

I need help to identify the device that's generating this error or find where is this coming from...

â€œ<Err dts="10/28/09 23:46:47" dtl="1256795207" source="drop200" priority="1" identifier="192.168.128.1">814: .Oct 29 2009 05:46:30.412: %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=3003 local=10.1.5.196 remote=10.1.7.196 spi=F5D24189 seqno=000006CA</Err>â€

Thanks,

June

Giuseppe Larosa · ‎11-03-2009

Hello June,

this is an error on an encrypted packet.

According to the message

>> mac verify failed for connection id=3003 local=10.1.5.196 remote=10.1.7.196

the remote device has IP 10.1.7.196

if this device is managed by your company it shouldn't be a problem to connect to it.

if it is not under your administration

sh ip route 10.1.7.196

and

traceroute 10.1.7.196

can help you find from where these packets are coming from

Hope to help

Giuseppe

Giuseppe Larosa · ‎11-04-2009

Hello June,

I haven't seen you had opened a thread also on WAN forum.

follow considerations that have been provided there.

Hope to help

Giuseppe

june_encarnacion · ‎11-04-2009

Thanks.This gives me a better picture of what's going wrong.