Broadcasting over router

[vinay_8812]

when sh ip accounting output packet command is enabled on serial int. of 1721 router, It shows some unidentified source and dest. IP address, what is this? is it broadcasting or something else ? Is it consume BW also ? how i can stop this

[vladrac-ccna]

Just curious as I'm not that familiar with this command.

what do you mean by unidentified source and dest.

Could you paste part of the output of this command for us ?

vlad

[vinay_8812]

the o/p is attached, The o/p shows source and destination Ip of my private n/w, 10.125.*.* is my private range, but in some places destination IP is not undre this range

[tdrais]

The 10.160.1.69 address in your sample looks like something that you also have inside your network and is valid.

Most the other "strange" traffic is coming from 10.125.78.240 This is caused by many thing but it is likely this is some form of filesharing software. skype and kazza look like this. This could also be a virus scanning for host.

You need to check that machine for unauthorized software or if contains virus.

You can also see invalid addresses when someone has the proxy misconfigured in their pc but that looks slightly different in the accounting output.

[vinay_8812]

right, it may be problem of virus

becouse 10.160.1.69 is not inside of my network.

is there any s/w through which i can take the audit or full information of any PC