TippingPoint
cancel
Showing results for 
Search instead for 
Did you mean: 

660N detecting 7002: TCP: Host Sweep from internal IP

mikeandrews
Occasional Visitor

660N detecting 7002: TCP: Host Sweep from internal IP

My 660N starting blocking internal IPs after detecting "7002: TCP: Host Sweep" with a destination of 0.0.0.0.  The only traffic from the reported IPs to broadcast or 0.0.0.0 is DHCP traffic.  

Why would TP detect and block that?

 

-Mike