Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

src 0.0.0.0 and dst 0.0.0.0

My IDS is logging traffic to src 0.0.0.0 and dst 0.0.0.0. How?

2 REPLIES

Re: src 0.0.0.0 and dst 0.0.0.0

Hi,

My guess would be that you have this signature set to Global Summarize. What this means is that instead of sending an alarm for every single source and destination, the sensor summarizes it into a single alarm. Can you confirm this setting?

Scott

Cisco Employee

Re: src 0.0.0.0 and dst 0.0.0.0

You can also look at the details field in the alarm, it should tell you if you are in a Summary or Global Summary mode.

315
Views
0
Helpful
2
Replies
CreatePlease to create content