Security Incidents mailing list archives

Re: Bogon IPs traffic only seen by netflow, confined within a VLAN only

From: stcroix111 () netscape net
Date: 10 Apr 2006 13:57:07 -0000

I have seen something simular. We were seeing "bad ARP request" messaged logged on our Cisco CSS 11050 switches when 
one of our admins plugged a "dumb" switch into the same Cisco 4006 switch as the CSS. Thankfully for us we were able to 
find the last change in order to find the source of the anomalous traffic.

Current thread:

Bogon IPs traffic only seen by netflow, confined within a VLAN only Stef (Apr 09)
- Re: Bogon IPs traffic only seen by netflow, confined within a VLAN only Roland Dobbins (Apr 10)
- Re: Bogon IPs traffic only seen by netflow, confined within a VLAN only Valdis . Kletnieks (Apr 10)
  - Re: Bogon IPs traffic only seen by netflow, confined within a VLAN only Roland Dobbins (Apr 10)
- <Possible follow-ups>
- Re: Bogon IPs traffic only seen by netflow, confined within a VLAN only Stef (Apr 10)
  - Re: Bogon IPs traffic only seen by netflow, confined within a VLAN only Roland Dobbins (Apr 10)
    - Re: Bogon IPs traffic only seen by netflow, confined within a VLAN only AJ Cochenour (Apr 11)
- Re: Bogon IPs traffic only seen by netflow, confined within a VLAN only stcroix111 (Apr 10)
- Re: Bogon IPs traffic only seen by netflow, confined within a VLAN only tsteeves (Apr 12)
  - RE: Bogon IPs traffic only seen by netflow, confined within a VLAN only David Gillett (Apr 12)
    - Re: Bogon IPs traffic only seen by netflow, confined within a VLAN only Lupe Christoph (Apr 13)