First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

2 IP Sources & Destination on the same packet ?

Hello,

Having some issues understanding something. We captured some SNMPv3 traffic from our network but on some specific packets, it shows 2 IPV4 sources & destinations !!!

IP's from the 10.1 network....we have absolutely no clues where these ip come from.

This was captured via a port mirroring. How is that possible ?

![image description] https://imgur.com/a/3U0R4VP

jerioux's avatar
1
jerioux
asked 2019-02-19 20:22:22 +0000, updated 2019-02-19 20:22:46 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

How is that possible?

Tunneling of some sort, such as RFC 2003 "IP Encapsulation within IP".

Guy Harris's avatar
19.9k
Guy Harris
answered 2019-02-19 20:38:29 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer