Re: pings

From: cc (cc_at_belfordhk.com)
Date: 12/29/04

  • Next message: Edel SM: "Re: Simple Firewall" 
    Date: Wed, 29 Dec 2004 18:33:32 +0800
To: Leif Ericksen <leife@dls.net>

    Leif Ericksen sighed and wrote::
    > Overall I would not worry to much about ping packets noticed in your
    > firewall logs. Yeah notice them and unless you are seeing hundreds to
    > thousands of packets not a big deal. I am on a DHCP connection with my
    > ISP and I see various hits in my IDS from PING. ping hits aer way to
    > common for most people to worry about.

    Here's a bit of stats that might put things into a bit of
    a perspective.

    Since 18th Feb. 2004, up until now, I've had 188000+ alerts.
    As it stands, 69% of these are ICMP packets.

    In the past, when I first installed snort on the firewall,
    most were TCP connects. Now the majority is ICMPs.

    So I'm a little bit perturbed by this...

  • Next message: Edel SM: "Re: Simple Firewall"

    Relevant Pages

    • Re: pings
      ... Overall I would not worry to much about ping packets noticed in your ... ISP and I see various hits in my IDS from PING. ... > I've been monitoring my firewall logs, ...
      (Security-Basics)
    • Netgear MA401 stopped working
      ... the host, seem to be sending packets, but never receive anything back. ... PING 192.168.112.1: 56 data bytes ... I, on the other hand, suspect a hardware problem with the card. ... pci_cfgintr: 0:2 INTA BIOS irq 11 ...
      (freebsd-net)
    • Re: netcat delays between pages over wan
      ... >8000 printers. ... All that is going to show you is that ping in the default mode has ... >servers and Lantronix servers were rebooted. ... By default ping sends 56 byte packets 1 second apart. ...
      (comp.unix.sco.misc)
    • ubr924 modem does not want to talk through its ethernet0 port
      ... hostname burpmaster ... interface cable-modem0 ... input packets with dribble condition detected ... burpmaster#ping 10.0.0.13 <-- Ping my unix box, which I am using to connect to the ubr924 modem's console port. ...
      (comp.dcom.sys.cisco)
    • Failing to use Linux PC as router
      ... I can ping from one computer to the other and from the ... INTERFACES eth0 (?Firewire? ... iface lo inet loopback ... packets transmitted, 5 packets received, 0% packet loss ...
      (Debian-User)