Tracing a broadcast on our network

[sgilfrin1]

We're regularly getting an intrusion detection message from our virus guard, broadcasting on 10.5.3.255. You can actually ping this address and get a reply of a proper ip address (although this keeps changing, one minute its that of a network printer, the next its something else). I'm guessing some little blighter is temporarily connecting to our network.

Any hints for tracking down/blocking this as and when the broadcast happens?

[Ganesh Hariharan]

Hi Steve,

As per the problem and observation by you in your network it can that one of the desktops / devices got infected with some malware and it is spoofing the address of the LAN and attacking on the server that why you are getting ip address and are getting blocked in server due antivirus installed in the server.

In order to resolve this i would recommend you to scan the desktops with latest antivirus patch.

Hope that clear out your query,If commenst was helpsful do rate the post.

Regards

Ganesh.H