Event ID 5778 - Client reporting wrong IP address

  • Thread starter Thread starter Drew McCurdy
  • Start date Start date
D

Drew McCurdy

Hello:

Recently, I've been seeing event ID 5778 "'computername' tried to
determine its site by looking up its IP address"...... The strange
thing is that the IP address in the reported event is not the IP
address of the client machine. Instead it's the public IP address of
our firewall. This event is being created by many different computers
on many different subnets, all reporting the firewall IP address in
the reported event.

Site, subnet, and all the AD replication objects have been in place
for some time. These errors are new. We have a hub-n-spoke network
with one hub and 64 spokes. The only thing that has changed in our
architecture is that we've replaced one of the 56K Frame Relay spoke
lines with a DSL/VPN. This seems about the time these errors started,
but it doesn't make sense to me.

Any ideas, anyone?

Thanks in advance,
Drew McCurdy
 
Hello,

What Service Pack are your machines?

What OS are your client machines running?

Please take a look at the article listed below:
311759 Event 5778 May Be Logged with an Incorrect IP Address
http://support.microsoft.com/?id=311759

Thank You.

Diana.

(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top