Re: Weird!

alejandro.flores_at_triforsec.com.br
Date: 07/06/04

  • Next message: Ansgar -59cobalt- Wiechers: "Re: Weird!"
    Date: Tue,  6 Jul 2004 13:47:05 -0300
    To: "Kostas K" <acezerocool@yahoo.com>
    
    

        Hello,

    On July 5, 7:22 pm Kostas K <acezerocool@yahoo.com> wrote:
    >
    >
    > IN=ppp0 OUT= MAC= SRC=xxx.xx.xxx.xxx DST=aa.aaa.aaa.aaa LEN=76
    > TOS=0x18 PREC=0x20 TTL=45 ID=56552 PROTO=ICMP TYPE=3 CODE=1
    > [SRC=aa.aaa.aaa.aaa DST=192.168.1.100 LEN=48 TOS=0x00 PREC=0x00 TTL=109
    > ID=16249 DF PROTO=TCP SPT=1730 DPT=4662 WINDOW=16384 RES=0x00 SYN
    > URGP=0 ]

    ICMP type 3 CODE 1 = ICMP Host Unreachable
    Ping is just one type of ICMP (Echo Request)
    This log means that probably one host inside your network tried to reach a
    server that is down, and the router next this server is telling that you
    can't get there. The way it tells you is via ICMP Destination Host
    Unreachable, or ICMP Type 3 Code 1.

    Regards,
    Alejandro Flores

    >
    > I get some weird logs from iptables. Someone is trying to ping (using
    > a c class ip) me with no result since it gets the msg. of host
    > unreachable. The weird thing or perhaps the things that i can't
    > understand is why the destination address in the first row is the same
    > with the src in the second row which seems to scan a c class ip which
    > happens to be private, while i am using a 10.0.0.0/24 network.
    > any ideas????
    >
    > Cheers.
    >


  • Next message: Ansgar -59cobalt- Wiechers: "Re: Weird!"