|
Posted by Walter Roberson on July 15, 2006, 9:39 am
If you were Registered and logged in, you could reply and use other advanced thread options
>i keep recieveing the following error message from my cisco pix
>firewall.
>PIX-3-305005: No translation group found for udp src
>inside:192.168.0.63/138 dst outside:192.168.255.255/138
>note that i dont have inside ip address 192.168.0.63 or any address in
>this range.
>i suspecte that its kind of virus!
If the address is constant it is more likely an unconfigured or
unauthorized Windows machine. The attempted packets are normal
NETBIOS broadcasts, from a host that thinks it is 192.168.0.63/16
You can use the PIX 'capture' command to snarf a few packets of
this type and look at the MAC address and try to track it down
that way. (You didn't give us any hint as to how big your network is.)
|