- Bronze, 100 points or more
CS MARS reports with a source ip address of 0.0.0.0 and port number 0. What does this mean?
Thank you in advance!
Click on the Incident ID, something like I:########, this will give you the individual sessions which created the incident. Note the destination IP address. You can also hit the icon for "raw messages" under the "reporting device" column.
You can always click on event type which will give you a popup window with description of event.
Cisco MARS detected an inactive reporting device that has not reported any event to MARS in the last hour. This may indicate that the device is not functioning properly.