1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

RV082 Log Problems

Discussion in 'Cisco Small Business Routers and VPN Solutions' started by jongie, Jul 13, 2007.

  1. jongie

    jongie Guest

    Hi,

    I'd like to ask for any idea about what's really happening on the log entry of RV082 (fw version: 1.3.5) as shown on the figure:

    [​IMG]

    Seems that the log entry is continuously updated every 5 to 10 minutes.

    Any help would be greatly appreciated.


    Thanks,

    Ed
     
  2. d__l

    d__l Network Guru Member

    239.255.255.250:1900 is a multicasting address used in UPnP. I'm not sure why your RV082 is seeing it as IP spoofing. I don't think I've ever seen that in my logs on 1.3.3.8 firmware, but then I don't use UPnP on the router either.
     
  3. 0x00C0FFEE

    0x00C0FFEE LI Guru Member

    I have the same problem

    I loooooot of these

    Jul 2 18:34:54 2007 Blocked - IP Spoofing UDP 10.0.10.14:2853->239.255.255.250:1900 on ixp1
    Jul 2 18:34:57 2007 Blocked - IP Spoofing UDP 10.0.10.14:2853->239.255.255.250:1900 on ixp1
    Jul 2 18:35:00 2007 Blocked - IP Spoofing UDP 10.0.10.14:2853->239.255.255.250:1900 on ixp1
    Jul 2 18:38:47 2007 Blocked - IP Spoofing UDP 10.0.10.10:49458->224.0.0.251:5353 on ixp1
    Jul 2 18:38:49 2007 Blocked - IP Spoofing UDP 10.0.10.10:49460->224.0.0.251:5353 on ixp1
    Jul 2 18:38:50 2007 Blocked - IP Spoofing UDP 10.0.10.10:49460->224.0.0.251:5353 on ixp1
    Jul 2 18:38:51 2007 Blocked - IP Spoofing UDP 10.0.10.10:49462->224.0.0.251:5353 on ixp1
    Jul 2 18:38:52 2007 Blocked - IP Spoofing UDP 10.0.10.10:49462->224.0.0.251:5353 on ixp1
    Jul 2 18:38:53 2007 Blocked - IP Spoofing UDP 10.0.10.10:49465->224.0.0.251:5353 on ixp1
     
  4. ifican

    ifican Network Guru Member

    All of these are multicast address, depending on how your machine if handling multicast traffic the router is mistaking the multicast packet (sourced from the same mac as the machine ip) as spoofed packets (because they essentially are). What this all means is simply turn off multicast if you can or just dont worry about is as its not harming anything.
     

Share This Page