All,
Been a couple years since I had to think of CCNA:Sec stuff so I am pretty rusty.
What are all the fields here from the output of a DAI alert?
SwitchB#
1w2d: %SW_DAI-4-INVALID_ARP: 9 Invalid ARPs (Req) on Gi3/31, vlan
100.([0002.0002.0002/170.1.1.2/0001.0001.0001/170.1.1.1/02:30:24 UTC Fri Feb 4 2005])
0002.0002.0002 = source mac?
170.1.1.2 = source Ip?
0001.0001.0001 = dest mac?
170.1.1.1 = desk IP?