Signature Detail
Short Name |
IP:INFO:INVALID-SOURCE |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
IP |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
IP: Invalid Source Address
This protocol anomaly triggers when it detects an IP packet with an invalid source address, such as 127.0.0.1. This can indicate a denial-of-service (DoS) attempt or packet generation using RAW sockets on the network.
Extended Description
The presence of incoming packets containing non-routable source addresses originating from outside an Intranets could indicate a spoofing or denial of service attack is being attempted.