Source address as 0.0.0.0

Unanswered Question
Nov 16th, 2009

We are getting Critical incidents in MARS with source address as 0.0.0.0 What does this mean and what action can be taken ?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Eduardo Aliaga Tue, 12/01/2009 - 22:09

Source address= 0.0.0.0 means that there's no Source IP information. Since there are lots of different

event types with source address= 0.0.0.0 , then you need to post what the exact event is

to help you out.

Actions

This Discussion