Packet with source IP 0.0.0.0

[csiracusa]

Hi,

is possible that a css11503, configured as http and https load balancer, sends packet with source IP 0.0.0.0?!

With an IDS, I can see packet with source IP 0.0.0.0, coming from the load balancer, but I cannot understand why.

Can someone help me?!

Best Regards

CS

[Gilles Dufour]

CSCek50736 The CSS is configured with an L5 VIP. The client sends a SYN to the VIP. The CSS responds with a SYN/ACK to the client. The SYN/ACK is returned as an ICMP unreachable to the VIP by a router unable to locate the client. This could cause the CSS to forward the ICMP unreachable with a src and dst ip of 0.0.0.0

You'll need a sniffer trace to identify the traffic.

Gilles.