Currently I am running NetScreen 25 as my firewall. I start experiencing the strange log at my NS25 since last month. The log are continuing logging every 15 seconds.
These are detail logs:
* 2004-02-16 11:08:31 alert ip spoof, From 10.2.2.2 to 224.0.0.10, using protocol 88 (on zone Untrust,interface ethernet3) occurred 1 times
* 2004-02-16 11:08:26 alert ip spoof, From 10.2.2.2 to 224.0.0.10, using protocol 88 (on zone Untrust,interface ethernet3) occurred 1 times
* 2004-02-16 11:08:21 alert ip spoof, From 10.2.2.2 to 224.0.0.10, using protocol 88 (on zone Untrust,interface ethernet3) occurred 1 times
The IP Spoof is from my router interface which is 10.2.2.2 (Next to my NS25 trust interface 10.2.2.1).
Any suggestions, comments or solutions are appreciates,
Thanks,
SL
These are detail logs:
* 2004-02-16 11:08:31 alert ip spoof, From 10.2.2.2 to 224.0.0.10, using protocol 88 (on zone Untrust,interface ethernet3) occurred 1 times
* 2004-02-16 11:08:26 alert ip spoof, From 10.2.2.2 to 224.0.0.10, using protocol 88 (on zone Untrust,interface ethernet3) occurred 1 times
* 2004-02-16 11:08:21 alert ip spoof, From 10.2.2.2 to 224.0.0.10, using protocol 88 (on zone Untrust,interface ethernet3) occurred 1 times
The IP Spoof is from my router interface which is 10.2.2.2 (Next to my NS25 trust interface 10.2.2.1).
Any suggestions, comments or solutions are appreciates,
Thanks,
SL