Re: ICMP on port 3

From: Srecko Jovancevic (xxx-x@amadeus.uni-bk.ac.yu)
Date: 12/10/02

  • Next message: Jill Tovey: "Re: XP admin shares" 
    From: "Srecko Jovancevic" <xxx-x@amadeus.uni-bk.ac.yu>
To: "Tony Meman" <none@superig.com.br>, <emmanuel.siegel@ota.fr.socgen.com>, <security-basics@securityfocus.com>
Date: Tue, 10 Dec 2002 09:03:27 +0100

    maybe a ddos daemon like TFN or trinoo
    the communicate with icmp ?
    did you scan your machine for them ? 

    --
Srecko Jovancevic, Information system manager
BK University Computing Centre
Belgrade, YU
---------------------------------------------
Phone:+381 11 60 40 22 ext +232
Cell.:+381 63 84 99 367
Use Linux! http://www.slackware.org
----- Original Message -----
From: "Tony Meman" <none@superig.com.br>
To: <emmanuel.siegel@ota.fr.socgen.com>; <security-basics@securityfocus.com>
Sent: Friday, December 06, 2002 10:30 PM
Subject: Re: ICMP on port 3
> ICMP doesnt use ports, what made you think it was port 3? Maybe you
confused
> with ICMP Type or Code. Can you check that?
>
> Regards,
>
> --
> none
>
> emmanuel.siegel@ota.fr.socgen.com wrote:
>
> >Hi
> >
> >i have a strange communication between two of my Linux server, it's ICMP
> >packet on port 3.
> >Do you know what it could be ?
> >
> >Thks
> >
> >Emmanuel
> >
> >
>
>
>

    Relevant Pages

    • Re: ipfw-ntad-jail
      ... > Ok, so I setup IPFW and NATd on my freeBSD 4.5-RELEASE box, ... > host (dagobah) ... > allow ftp (port 21) ... > add 00600 allow icmp from any to any icmptypes 3 ...
      (FreeBSD-Security)
    • Re: Survive without ICMP?
      ... ICMP resides above IP protocol, ... it receives a UDP or TCP packet on port 0 would be packets ... ICMP Type 3 Code 3 (Port unreachable). ... when it receives a TCP packet to a forbidden port which may ...
      (comp.security.firewalls)
    • Re: Survive without ICMP?
      ... > an Orion modem, Linksys programmable router, three machines ... > Linksys router responding to port 0 requests. ... > a timestamp ICMP did make it through to our hack testing. ... > the ICMP packet for a netmask. ...
      (comp.security.firewalls)
    • Re: Keine ICMP Replys mit NAT unter Windows 2003 Server SR2
      ... Windows wohl nichts anderes übrigbleiben als "Port and Address ... Protokollen wie ICMP, die keine Ports haben... ... Und wieso funktionierts dann bei uns allen? ... Port Address Translation extends the notion of translation one step ...
      (microsoft.public.de.german.windows.server.networking)
    • Re: nmap and icmp-replies
      ... Since UDP is stateless, it's the only way a stack can "tell" a port is closed/filtered. ... Even if you send a packet to an open UDP Port, depending on the protocol your scanner has to send a valid payload to get an answer. ... If your target sends ICMP Dest-Unrecheachables, ... You have an option to go with a managed service or an enterprise software. ...
      (Pen-Test)