cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5620
Views
15
Helpful
16
Replies

Cisco 3850 logging……

jing zhang
Level 1
Level 1

why?

Feb 25 09:18:51: *%APF-4-ADD_TO_BLACKLIST_REASON: 1 wcm:  Client 3859.f9e6.55da (AuditSessionID: 0a41c864530bef55000001a5) was added to exclusion list. Reason: IP address theft 

Feb 25 09:18:51: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:18:56: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:01: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:03: *%APF-4-ADD_TO_BLACKLIST_REASON: 1 wcm:  Client 3c77.e692.60af (AuditSessionID: 0a41c864530bee700000018d) was added to exclusion list. Reason: IP address theft 

Feb 25 09:19:06: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:11: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:16: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:17: *%APF-4-ADD_TO_BLACKLIST_REASON: 1 wcm:  Client 0024.d6a8.ff6a (AuditSessionID: 0a41c864530bef240000019f) was added to exclusion list. Reason: IP address theft 

Feb 25 09:19:21: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:27: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:32: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:37: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:42: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:47: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:52: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:57: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:02: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:06: *%APF-4-ADD_TO_BLACKLIST_REASON: 1 wcm:  Client 74e5.432d.b5a9 (AuditSessionID: 0a41c864530befc4000001ac) was added to exclusion list. Reason: IP address theft 

Feb 25 09:20:07: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:12: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:17: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:22: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:27: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:28: *%APF-4-ADD_TO_BLACKLIST_REASON: 1 wcm:  Client 3859.f9e6.55da (AuditSessionID: 0a41c864530befd5000001af) was added to exclusion list. Reason: IP address theft 

Feb 25 09:20:32: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:37: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:42: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:47: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:18:51: *%APF-4-ADD_TO_BLACKLIST_REASON: 1 wcm:  Client 3859.f9e6.55da (AuditSessionID: 0a41c864530bef55000001a5) was added to exclusion list. Reason: IP address theft 

Feb 25 09:18:51: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:18:56: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:01: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:03: *%APF-4-ADD_TO_BLACKLIST_REASON: 1 wcm:  Client 3c77.e692.60af (AuditSessionID: 0a41c864530bee700000018d) was added to exclusion list. Reason: IP address theft 

Feb 25 09:19:06: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:11: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:16: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:17: *%APF-4-ADD_TO_BLACKLIST_REASON: 1 wcm:  Client 0024.d6a8.ff6a (AuditSessionID: 0a41c864530bef240000019f) was added to exclusion list. Reason: IP address theft 

Feb 25 09:19:21: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:27: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:32: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:37: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:42: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:47: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:52: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:19:57: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:02: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:06: *%APF-4-ADD_TO_BLACKLIST_REASON: 1 wcm:  Client 74e5.432d.b5a9 (AuditSessionID: 0a41c864530befc4000001ac) was added to exclusion list. Reason: IP address theft 

Feb 25 09:20:07: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:12: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:17: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:22: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:27: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:28: *%APF-4-ADD_TO_BLACKLIST_REASON: 1 wcm:  Client 3859.f9e6.55da (AuditSessionID: 0a41c864530befd5000001af) was added to exclusion list. Reason: IP address theft 

Feb 25 09:20:32: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:37: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:42: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

Feb 25 09:20:47: %WCDB-3-WCDB_IP_CONFLICT: IP theft found!! The wired client-0024.d705.0621 source-IP SNOOPING tries to steal the IP 10.65.8.165 of the wireless host-0026.b968.b39b source-ARP

16 Replies 16

Hi

Are you using same vlan for wired & wireless users (or does your 3850 enable for wireless & manage AP ?)

Rasika

Hi,

 

We have expirienced the same issue.

We don't using same vlan wired and wireless, but we have two standalone controllers (CT5760) with mobillity between them.

actually, when user mobile from one controller to another we see the same log.

 

Review Cisco Networking products for a $25 gift card