IDS mailing list archives

Re: possible causes of source and destination ip from external network


From: Tony Carter <tcarter () entrusion com>
Date: Thu, 24 Jun 2004 01:50:17 -0400

I've seen this before when the IDS was on the external side of a Nokia/Checkpoint firewall doing proxy arp.

Sorry, I can't remember all of the details...

HTH,
Tony

On Jun 19, 2004, at 10:09 AM, Annie Green wrote:

Hi all

What would be the possible causes of the IDS alert that shows source ip and destination ip from external network? Also, why did the router route this packet in the first place?

Regards,
A.

_________________________________________________________________
Get MSN Hotmail alerts on your mobile. http://en-asiasms.mobile.msn.com/ac.aspx?cid=1002


----------------------------------------------------------------------- ----

----------------------------------------------------------------------- ----



---------------------------------------------------------------------------

---------------------------------------------------------------------------


Current thread: