Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

packets sourced from 127.0.0.x

When I perform ip accounting on my eternet interface ,I find ip packets sourced for the local host address with the last octet changed.Does any one know why these packets are coming out?

1 REPLY
Community Member

Re: packets sourced from 127.0.0.x

This may be an ill conceived fix for the MSBLAST.EXE virus, where DNS for microsoftupdate.com has been pointed to the local host address

have a read of this link and check all kit for viruses

http://lists.netsys.com/pipermail/full-disclosure/2003-August/008308.html

308
Views
0
Helpful
1
Replies
CreatePlease to create content