Re: pings

From: Rodrigo Ramos (rodrigo.ramos_at_triforsec.com.br)
Date: 12/30/04

  • Next message: Lim Ming Wei: "Re: Wireless security question" 
    To: cc <cc@belfordhk.com>
Date: Thu, 30 Dec 2004 08:48:06 -0300

    Hi,

    What kind of ICMP packets are those? Just echo "8"?
    You may try to get these kind of information from another networks?

    Best regards,
    Rodrigo Ramos
    http://www.triforsec.com.br

    On Wed, 2004-12-29 at 07:33, cc wrote:
    > Leif Ericksen sighed and wrote::
    > > Overall I would not worry to much about ping packets noticed in your
    > > firewall logs. Yeah notice them and unless you are seeing hundreds to
    > > thousands of packets not a big deal. I am on a DHCP connection with my
    > > ISP and I see various hits in my IDS from PING. ping hits aer way to
    > > common for most people to worry about.
    >
    > Here's a bit of stats that might put things into a bit of
    > a perspective.
    >
    > Since 18th Feb. 2004, up until now, I've had 188000+ alerts.
    > As it stands, 69% of these are ICMP packets.
    >
    > In the past, when I first installed snort on the firewall,
    > most were TCP connects. Now the majority is ICMPs.
    >
    > So I'm a little bit perturbed by this...
    >

  • Next message: Lim Ming Wei: "Re: Wireless security question"

    Relevant Pages

    • Re: How to test whether a host is reachable?
      ... As the subject says I need to test whether a host computer in our ... network is reachable or not. ... Just because you could ping with ICMP packets doesn't mean you could ...
      (comp.lang.python)
    • Re: nethack.alt.org down again???
      ... ping when it was up was when a shoddy nntp server ... started blocking pings (or the firewall before it as you say) and ... Many/most corporate firewalls block most/all ICMP packets, ... responding to ICMP packets. ...
      (rec.games.roguelike.nethack)
    • ICMP - Raw socket
      ... If i ping my machine from other pcs, ... which means there are some icmp packets reached my machine, ... But if i ping other pcs from my machine, recvfrom returns ...
      (microsoft.public.win32.programmer.networks)
    • Re: distributed natd
      ... > Keeping with the above ping pong idea, maybe instead of icmp packets you can ... By "ping" I did not mean sending ICMP to peer gateway, ... traffic, then we have state tables updated constantly, thus alive gateway ...
      (FreeBSD-Security)
    • Re: How to test whether a host is reachable?
      ... I think of something like a python version of ping ... which only tries to send ICMP packets. ... Server or a firewall in between most probably will filter out any ICMP ...
      (comp.lang.python)