Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About NewToNetworking
NewToNetworking
Here to help
Member since Mar 28, 2022
May 11 2023
Community Record
16
Posts
2
Kudos
1
Solution
Badges
Oct 26 2022
7:01 AM
I am getting some reports from the security center, these alerts are regarding .null requests to what seem to be legitimate places. The alerts state that they are coming from our Domain Controller and the requests are being made to multiple different IP addresses that check out from VirusTotal and Shodan. Sid 1-48666 from Snort is blocking the .null requests which flag as a indicator of compromise. Alerts are only being generated during work hours. I would like to know what steps you all would take to investigate/resolve this issue. https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/dns-name-queries-not-success "socialize.null" 4.2.2.2 e.root-servers.net 192.203.230.10 G.ROOT-SERVERS.NET 192.112.36.4
... View more
Aug 12 2022
7:51 AM
I was trying to avoid rebooting anything but after rebooting the switch it was directly connected to it was able to grab the IP from the DHCP server.
... View more
Aug 12 2022
6:39 AM
Try checking this out if you have not already. Client-Tracking Options - Cisco Meraki If a new IP and MAC address are paired it creates a new client (Unique Client Identifier). Depending on how your network is setup it could be creating those clients for incoming traffic from your MX.
... View more
Aug 12 2022
6:10 AM
No the only packets that are coming up under DHCP are Discover and Offer packets.
... View more
Aug 11 2022
2:57 PM
There is a MX connected to the Layer 3 switch but I do not believe that the traffic flows through it. DHCP snooping is enabled. I see the offer packet and then it stops and loops back again. I am capturing the packets on the port of the switch that the camera is on. The offer packet is being sent as a unicast packet. Does it matter that the Discover packet has bootp flag is set to 0 for unicast?
... View more
Aug 11 2022
2:53 PM
Yes VLAN 30 is allowed on all trunk ports that leads back to the DHCP server and relay is setup for the layer 3 router. Ports were configured the same way as well. Only difference is that the Native VLANs are different. One is on VLAN 1 and the one that it worked on was NATIVE VLAN 101. No configurations have been made when the camera went down and was working on this current setup for months before having an issue... I am thinking it has to do with the Offer packet sent by the DHCP server. It does not look like other packets that are issued. The destination is not 255.255.255.255 it includes the IP that is trying to be offered.
... View more
Aug 11 2022
12:53 PM
As my name indicates, I am pretty new to networking. I have an IP camera that suddenly lost its IP address and can only get one via DHCP. It went offline and started broadcasting Discover packets to get a new IP. From what I can see there are offers being sent to the camera but it is not requesting one of the two IPs that are being offered. Meraki is showing that on the port no offers are being received by the camera but when I do a packet capture on that specific port it shows that the offer is getting there. I did notice that on the offer packet it includes the IP address that is being offered as the destination and I do not think that is correct, but I could be wrong (ex. OFFER PACKET source: DHCP server IP / MAC , destination: DHCP offered IP / Camera MAC). DHCP relay is turned on and directed towards the DHCP Server. Note: Camera did work when plugged into another switch and gained a new IP dynamically for testing. Don't ask me why it is setup this way lol I am not the Architect or Engineer. Thank you for any help in advance.
... View more
Apr 20 2022
7:32 AM
After pulling a pcap on the switch that the end device is on, it seems that the camera is receiving the SYN but is not responding. I am going to do some more research to triple check all camera configurations. Thank you all for the guidance.
... View more
Apr 18 2022
1:02 PM
I have a camera on my local network that I am having some issues connecting to. All information seems to be correct on the ports and I am receiving RTSP feed from the camera when I log into the admin device which is connected to another switch but when when I enter the IP of the device from my computer which is on a different VLAN it will not connect. Ping and Tracert have been ran with no result. I think I am missing something simple here and maybe over thinking it. Also I am able to ping other devices that are on different VLANs that are on the same switch as the device that I can not connect to. Thank you all for your help in the past and I look forward to hearing what solutions you may have! Let me know what other information that I can provide that may help in troubleshooting.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 4139 | Aug 12 2022 7:51 AM |
© 2024 Cisco Systems, Inc.
