pix error message

Jul 15, 2006 1 Replies
A

Dear all,



i keep recieveing the following error message from my cisco pix firewall.



PIX-3-305005: No translation group found for udp src inside:192.168.0.63/138 dst outside:192.168.255.255/138 Jul 15 06:28:16 intpix Jul 15 2006 07:14:56: %



PIX-3-305005: No translation group found for udp src inside:192.168.0.63/137 dst outside:192.168.255.255/137 Jul 15 06:28:17 intpix Jul 15 2006 07:14:57: %



note that i dont have inside ip address 192.168.0.63 or any address in this range.



i suspecte that its kind of virus!



any help ??



thanx a lot.



Vote
Twitter Facebook LinkedIn
W

If the address is constant it is more likely an unconfigured or unauthorized Windows machine. The attempted packets are normal NETBIOS broadcasts, from a host that thinks it is 192.168.0.63/16

You can use the PIX 'capture' command to snarf a few packets of this type and look at the MAC address and try to track it down that way. (You didn't give us any hint as to how big your network is.)

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required