Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Cisco ASDM Log (Deny Reverse Path Check)
Uniqs:
824
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Stupid User Tricks: Password Selection - "WORD1" »
« Wired ADSL modem security configurations  

tekmunki
Tekmunki
Premium
join:2001-12-06
Lake City, FL
clubs:
·NuVox Communications


1 edit

Cisco ASDM Log (Deny Reverse Path Check)

Click for full size
I started seeing these in my Cisco 5520 logs... Any idea what could be causing it?

My "INSIDE" network is 172.168.0.0/16

Should I be concerned? The IP is an internal reserved, I assume something is misconfigured internally- however, tracking it could be a feat.

Lanik
Lab-nik
Premium,ExMod 2002-03
join:2001-06-25
Bay Area

Re: Cisco ASDM Log (Deny Reverse Path Check)

said by tekmunki See Profile :

... I assume something is misconfigured internally- however, tracking it could be a feat.
That would be my first guess. How many clients are connected to this router?
--
"If it ain't broke don't fix it."

tekmunki
Tekmunki
Premium
join:2001-12-06
Lake City, FL
clubs:
·NuVox Communications

Re: Cisco ASDM Log (Deny Reverse Path Check)

said by Lanik See Profile :

said by tekmunki See Profile :

... I assume something is misconfigured internally- however, tracking it could be a feat.
That would be my first guess. How many clients are connected to this router?
Today, only around 50 clients.
--
TekMunki
"There are 10 types of people in this world, those who understand binary and those who don't."

www.tekmunki.com
bmn
? ? ?
Premium,ExMod 2003-06
join:2001-03-15
hiatus

»forums.cisco.com/eforum/servlet/···1dd9020e

As for tracking it down... You could try logging into the CLI of the ASA, get the MAC address (it should have it in it's cache) and then do a lookup of the manufacturer. Assuming you have managed switches, you can then login to the various switches and track the MAC address down to a specific switch port.

Used to do this kind of stuff all the time. We wouldn't know the exact location of a system, so we would follow the ports where the MAC address is showing up back to the last switch and we would find the port it is attached to.
--
Prove it...
Save the Internet Time (NTP) service, use the pool.

tekmunki
Tekmunki
Premium
join:2001-12-06
Lake City, FL
clubs:
·NuVox Communications

Re: Cisco ASDM Log (Deny Reverse Path Check)

"show arp" didn't give me anything related to the 169 addresses, what other method did you have in mind to find the mac?

I can easily track the mac down if I can find it.
--
TekMunki
"There are 10 types of people in this world, those who understand binary and those who don't."

www.tekmunki.com
bmn
? ? ?
Premium,ExMod 2003-06
join:2001-03-15
hiatus


1 edit

Re: Cisco ASDM Log (Deny Reverse Path Check)

said by tekmunki See Profile :

"show arp" didn't give me anything related to the 169 addresses, what other method did you have in mind to find the mac?

I can easily track the mac down if I can find it.
You will need a hub that you can place between all the uplinks to the router and the actual router itself. You will then need to download Wireshark ( »www.wireshark.org/ ) and capture packets from the wire in promiscuous mode to grab the MAC address.

If you don't have a hub, you'll have to use port mirroring. Port mirroring is the preferred method, BTW, as it will cause the least amount of disruption to the network.

Ignore the port mirroring part... Just realized you are using an ASA and it doesn't have the ports to do it IIRC (you need at least TWO on the LAN side).
--
Prove it...
Save the Internet Time (NTP) service, use the pool.
Forums » Up and Running » Security » SecurityStupid User Tricks: Password Selection - "WORD1" »
« Wired ADSL modem security configurations  


Monday, 14-Dec 17:20:16 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [97] Google To Sell Phone Directly To Consumers
· [63] TiVO Tries To Figure Out Where It Fits
· [50] Faster Verizon DSL Service Will Burn Your House Down
· [42] NY Times: AT&T 3G Network Is Secretly Awesome
· [20] Verizon Kindly Forgives Kid's $21,917 3G Bandwidth Bill
· [19] Sweden First To Get LTE Service
· [18] Rural Broadband User? You're Screwed
· [1] Monday Morning Links
Most people now reading
· Official Mediacom Email Discussion Thread [Mediacom]
· Ashen Verdict Rep farming guide (ICC 10) [World of Warcraft]
· personal check etiquette [General Questions]
· IMG 1.7 (IMG Updates and Discussion) [Verizon FIOS TV]
· Exalted with Ashen Verdict before the end of the week [World of Warcraft]
· So independants will be out of business in..........? [Canadian Broadband]
· Cross Server Dungeon Experience [World of Warcraft]
· [Rant] BUG in MY FOOD, After i ate 90% of it.. [Rants, Raves, and Praise]
· DKs and their obsession with Agility [World of Warcraft]
· [ Classes] DK best DPS spec [World of Warcraft]