This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Strange IP 10.118.192.1 in firewall network usage logs

Hi folks,

recently I observed some strange log entries in the firewall usage logs:

there seems to be traffic from a client 10.118.192.1 proto udp service bootpc

I also can ping this ip 10.118.192.1 from INSIDE our network but not from outside. (the outside behaviour ist what I had expected...)

So, I guess it's some Sophos VPN stuff, but I would rather know it exactly...

Can someone explain/clarify this?

This thread was automatically locked due to age.

0 twister5800 over 10 years ago

Can you try traceroute directly connected?
Cancel
Vote Up 0 Vote Down

Cancel
0 effendi over 10 years ago

Ok, now it's getting clearer.
Directly connected to my KabelBW modem/router I get the same behaviour. So it seems that it's not related to Sophos UTM. However, I'd still like to know what this is for and why I see a sigificant traffic in the logs...
Cancel
Vote Up 0 Vote Down

Cancel
0 effendi over 10 years ago

Yes, first hop is the KabelBW Box, second one ist 10.118.192.1.
Cancel
Vote Up 0 Vote Down

Cancel
0 twister5800 over 10 years ago

Getting closer :-)

Do you have an updated arp table now?
Cancel
Vote Up 0 Vote Down

Cancel
0 effendi over 10 years ago

No, unfortunately no arp entry available even when connected directly to the modem/router...
Cancel
Vote Up 0 Vote Down

Cancel