TippingPoint
1748061 Members
5644 Online
108758 Solutions
New Discussion

660N detecting 7002: TCP: Host Sweep from internal IP

 
mikeandrews
New Member

660N detecting 7002: TCP: Host Sweep from internal IP

My 660N starting blocking internal IPs after detecting "7002: TCP: Host Sweep" with a destination of 0.0.0.0.  The only traffic from the reported IPs to broadcast or 0.0.0.0 is DHCP traffic.  

Why would TP detect and block that?

 

-Mike