cthomas

Another scenario would be ICMP monitoring of the WAN interface of a remote Firewall, while pulling SNMP information over the the LAN interface which is accessible over a site-2-site VPN connection.

I'll second this - The ability to split and or combine subnets is a required feature for any IPAM application.. This is something that other products such as InfoBlox and IPplan do very well.

Z, We are not monitoring endpoints. The wireless networks are essentially treated as "Guest Networks". UDT logs all of the MAC Addresses that are seen on the wireless and tracks which APs they have been seen on. Perhaps the approach is to look at each MAC address, alert if it has been both associated with an SSID, and seen…

You can disable scanning of those IP Addresses, or the entire Subnet.

Stringbender, Verify that you are in fact polling with ICMP and not SNMP. I've seen similar behavior if a device is inadvertently configured to pull via SNMP. -ct