Surveyor User's Guide

10-89
Expert Features
Network Layer
10
Illegal Network Source Address
Counter
Illegal Network Source Address is a counter of all illegal network source addresses
over a period of time per segment. A count of all illegal MAC source addresses
displays in the
Overview counters of Expert View. A threshold for this counter can
be set in Expert Alarms.
Expert Symptom
Illegal network source addresses are automatically logged as expert symptoms. The
Symptom Summary field provides the illegal address encountered. For example:
Addr=[255.255.255.255]
This symptom can help catch malfunctioning routers or bad addresses generated
due to collisions.
Diagnostic Details
__________________________________________________________________
Problem Description:
A broadcast network address has appeared as a source address.
This is a problem associated with a bad host.
__________________________________________________________________
Probable Cause(s):
1. Someone is transmitting illegal frames using a traffic generator.
2. There may be a faulty adapter card/host.
__________________________________________________________________
Recommended Action(s):
1. Filter on the MAC address to determine the faulty card and replace it.