cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

221
Views
0
Helpful
0
Replies
Highlighted
Beginner

aip-ssm asymmetrical ip on captures

Hy guys, i'm seeing strange behaviour in the packet captures, virtual sensor is configured to "Log Pair Packets" when an attack happens. The thing is that in the captures the ip of the victim switches from the real to the nated ip depending on the direction of the traffic.

For instance the first packet has destination 172.16.9.1 (nated ip), but then in the other direction it hast source 172.16.9.1 (the real ip)

Is this normal? can i alter the configuration in such a way that only one ip appears?