Is it possible to discover the internal server which is sweeping our network by the gateway Juniper Switch?

Our network topology is like this:

enter image description here

If the servers under access switch all are different users. there I have a problem, that is:

if one of the servers DDoS attack all the servers under my network, how can I find it out?

there if like this attack, there must through the gateway switch.

So, how can I capture the source server?

  • Do you know the IP address of the scanner?
    – Ron Trunk
    Aug 23 '19 at 12:10
  • I want to get the attack source IP.
    – aircraft
    Aug 23 '19 at 12:21
  • 1
    Can you capture packets? How do you know you're being scanned?
    – Ron Trunk
    Aug 23 '19 at 12:27
  • If you see a sweep you see the packets - the source MAC is the sweeping station. Check the switches' MAC tables to locate the MAC.
    – Zac67
    Aug 23 '19 at 15:11
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer.
    – Ron Maupin
    Dec 15 '19 at 18:38

Is it possible to discover the internal server which is sweeping our network by the gateway Juniper Switch

Simple answer is possible. Simply you can find out source address by analyzing packets. But it will not much successful because if attacker knows how to sweep internal network from outside, he never ever use real IP address.

In addition to that, there are many ways to sweep inside network from outside. In my network i detect same situation and my firewall directly shows some ip address which trying to access my internal network. IP address from well reputed telecom company in my country we directly contact them and did inspection. But really what happened was there was virus inside my network It send to Internal Ip address to external source. Then outside firm try to access my network through fake ip address. Fortunately firewall blocked that request it was not allowed to access..

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.