Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

PIX-2-106016 Deny IP spoof from 127.0.0.???

Hey guys,

Just checking my PIX logs and I keep getting this alert "Aug 21 2008 09:37:15: %PIX-2-106016: Deny IP spoof from (127.0.0.??) to 108.122.0.0 on interface dmz"

The last octet of the 127 address changes and it's to the same destination. Just wondering if this is a config issue on my end or is it a legit concern.

thanks,

4 REPLIES
New Member

Re: PIX-2-106016 Deny IP spoof from 127.0.0.???

Can you use the show arp command to determine the ethernet source address.

Regards.

New Member

Re: PIX-2-106016 Deny IP spoof from 127.0.0.???

There are no arp entries for the source or destination and there are no connections with those numbers either.

Still there it is.

New Member

Re: PIX-2-106016 Deny IP spoof from 127.0.0.???

What do you think about a capture?

New Member

Re: PIX-2-106016 Deny IP spoof from 127.0.0.???

What do you think about a capture?

786
Views
0
Helpful
4
Replies
CreatePlease to create content