Scans From 192.168.0.134

["Douglas P. Brown" <Doug () UNC EDU>]

We are somewhat preplexed - Our IDS reported 8000+ SYN FIN scans from a
non-routable address (192.168.0.134) to thousands of ours hosts
yesterday.  Our IDS setup is only seeing traffic that traverses our main
router.  Has anyone seen this before?  Am I missing something?  Any
advice or direction you can offer would be greatly appreciated.

Cheers,
-DpB
--

Douglas P. Brown
University of North Carolina
I.T. Security Consultant
105 Abernethy Hall