This may be WAY off, but as insane as this may sound. I have heard of certain keyboards that are written with drivers that constantly try to ping a certain domain. I heard of a home user getting a lot of ping entries in the firewall logs. Just a shot in the dark...
-----Original Message----- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 3:37 PM To: [EMAIL PROTECTED] Subject: Re: Broadcast [7:41019] Are you saying that all your hosts are pinging 172.16.255.255 continually? What OS are the hosts running? What applications are they running? When did this start? Did you change anything before it started? Have you done some research on the Internet for problems related to your symptoms? How secure is your network? Do you have any disgruntled employees that could be playing a trick on you? How secure are your firewalls? Do you protect from SMURF and other attempts? You may be under attack. If you think that could be the case, I recommend you get some professional help right away. On the other hand, it may be normal. I remember seeing something similar with HP's JetAdmin. Some printer device drivers erroneously install JetAdmin, including the part that really should only be used by network management. The end result is that every device continuously tries to discover printers on the subnet by broadcasting. One thing that sticks out as a little strange is that with a /24 subnet mask, your hosts think they are sending to subnet 255. Could this be a clue? Are some hosts misconfigured? Do they use DHCP to get their address or are they manually configured? Priscilla At 08:14 AM 4/10/02, kaushalender wrote: >Hi group , > >I have network of 172.16.32/24 .When i put debug of ip icmp i see all ip >in this network r pinging 172.16.255.255.Can somebody will help me to >tell whis this is so. > >Thanx >kaushalender ________________________ Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41086&t=41019 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
