Re: possible causes of source and destination ip from external network

From: Tony Carter (tcarter_at_entrusion.com)
Date: 06/24/04

  • Next message: Sasha Romanosky: "RE: Anomaly Based Network IDS" 
    Date: Thu, 24 Jun 2004 01:50:17 -0400
To: "Annie Green" <annie_r_green@hotmail.com>

    I've seen this before when the IDS was on the external side of a
    Nokia/Checkpoint firewall doing proxy arp.

    Sorry, I can't remember all of the details...

    HTH,
    Tony

    On Jun 19, 2004, at 10:09 AM, Annie Green wrote:

    > Hi all
    >
    > What would be the possible causes of the IDS alert that shows source
    > ip and destination ip from external network? Also, why did the router
    > route this packet in the first place?
    >
    > Regards,
    > A.
    >
    > _________________________________________________________________
    > Get MSN Hotmail alerts on your mobile.
    > http://en-asiasms.mobile.msn.com/ac.aspx?cid=1002
    >
    >
    > -----------------------------------------------------------------------
    > ----
    >
    > -----------------------------------------------------------------------
    > ----
    >

    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------

  • Next message: Sasha Romanosky: "RE: Anomaly Based Network IDS"