TippingPoint
1751876 Members
5211 Online
108782 Solutions
New Discussion

660N detecting 7002: TCP: Host Sweep from internal IP

 
mikeandrews
New Member

660N detecting 7002: TCP: Host Sweep from internal IP

My 660N starting blocking internal IPs after detecting "7002: TCP: Host Sweep" with a destination of 0.0.0.0.  The only traffic from the reported IPs to broadcast or 0.0.0.0 is DHCP traffic.  

Why would TP detect and block that?

 

-Mike