Hi
We discover there are so many (source) ip not belonging to our network
to go to outside.
We can block it but don't know how to locate the source.
Any tools can be easily found out.
Thank you
We discover there are so many (source) ip not belonging to our network
to go to outside.We can block it but don't know how to locate the source.
Any tools can be easily found out.
http://lmgtfy.com/?q=unicast+rpf
Steinar Haug, Nethelp consulting, sthaug@nethelp.no
Also - http://lmgtfy.com/?q=tracing+spoofed+source+on+network
Which get you to some strategies for finding the source(s) on your network (which I believe was the OP's question). Including:
http://www.csm.ornl.gov/~dunigan/oci/bktrk.html
http://www.cymru.com/Documents/tracking-spoofed.html
-DMM
also, of course netflow... which I think Deric has asked about in the past?