Specifications

108 ExtremeWare Error Message Decoder
Critical Messages
Spoofing Attack
<CRIT:IPHS> Possible spoofing attack from 00:81:bb:10:9c:80 port 3:3
Software Version
ExtremeWare 4.x
Hardware Version
All
Explanation
This message indicates one of the following:
• You have a duplicate IP address on the network (same as an address on a local interface).
• The IP source address equals a local interface on the router and the packet needs to go up the IP
stack (that is, multicast/broadcast). In the BlackDiamond, if a multicast packet is looped back from
the switch fabric, this message appears.
Whenever the BlackDiamond receives a “CRIT” level message, the ERR LED on the MSM turns to
amber.
Action
Check host interfaces and make sure there are no duplicate IP addresses.