Sagan high stable other

[CISCO-MERAKI] IP Conflicts - Martian SRC Detected

[CISCO-MERAKI] IP Conflicts - Martian SRC Detected

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[CISCO-MERAKI] IP Conflicts - Martian SRC Detected"; content: "type
| 22 3a 20 22
| mac_spoofing_attack"; content:"
| 22
| Client
| 22 3a
| "; content:!"169.254."; classtype:attempted-user; reference:url,https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Event_Types_and_Log_Samples; sid:5015137; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...