I'm playing around with the Cisco ASDM with an ASA5520, only the internal interface is connected, and I enabled the reverse path check (rpc) anti-spoofing and within a minute I'm getting syslog warnings of
Deny ICMP [or UDP] reverse path check from 192.168.1.1 to 192.168.xxx.xxx [so far only 2 internal addresses] on interface [internal interface]
The came in groups of three, first UDP then ICMP, other then putting on a sniffer and waiting for them to reoccur what's a good way to track these down? Its now been about 20 minutes since the last round. I'm I reading this wrong and there isn't a reason to be concerned?