<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Unknown source in alert in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/unknown-source-in-alert/m-p/709354#M92306</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;This usually means the signature has summarized a group of alarms.  To check if this is the case, set the signature to "Fire All".  If it quits happening, then this is definitely the issue.  You might have to do a Fire All if you want to see the Source IPs.  Or you may have to change the summary key.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 25 Sep 2006 20:21:39 GMT</pubDate>
    <dc:creator>jwalker</dc:creator>
    <dc:date>2006-09-25T20:21:39Z</dc:date>
    <item>
      <title>Unknown source in alert</title>
      <link>https://community.cisco.com/t5/network-security/unknown-source-in-alert/m-p/709353#M92304</link>
      <description>&lt;P&gt;What does it mean when an alert lists 0.0.0.0 as the source that triggered the signature? &lt;/P&gt;</description>
      <pubDate>Sun, 10 Mar 2019 10:14:31 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/unknown-source-in-alert/m-p/709353#M92304</guid>
      <dc:creator>tami.martin</dc:creator>
      <dc:date>2019-03-10T10:14:31Z</dc:date>
    </item>
    <item>
      <title>Re: Unknown source in alert</title>
      <link>https://community.cisco.com/t5/network-security/unknown-source-in-alert/m-p/709354#M92306</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;This usually means the signature has summarized a group of alarms.  To check if this is the case, set the signature to "Fire All".  If it quits happening, then this is definitely the issue.  You might have to do a Fire All if you want to see the Source IPs.  Or you may have to change the summary key.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 25 Sep 2006 20:21:39 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/unknown-source-in-alert/m-p/709354#M92306</guid>
      <dc:creator>jwalker</dc:creator>
      <dc:date>2006-09-25T20:21:39Z</dc:date>
    </item>
  </channel>
</rss>

