Quantcast
Channel: Network Infrastructure Servers forum
Viewing all articles
Browse latest Browse all 5877

AD logon events with two source IP addresses ?

$
0
0

Hello, I am seeing AD logon events with source multiple address as two separate IP addresses i.e. the address of the Ethernet wired LAN and the address of the wifi NIC.

How could this be happening i.e. receiving a logon event to AD with the two source IP addresses of the same machine at the same time ?

Thank you.

Example (note the two IP source addresses, one for wired and one for wifi NIC 'ip:10.100.5.103:10.90.0.184':

[RECV_EVENT_FROM_DC]packet_len:62 dcagent_ip:10.5.1.62 time:1547863053 data_len:45 data:E7440-CWMLH12.domain.forest/DOMAIN/DaveParker ip:10.100.5.103:10.90.0.184


Viewing all articles
Browse latest Browse all 5877

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>