Re: constant unrequested ICMP ECHO REPLY

From: jealous xmp (jealousxmp_at_aol.com)
Date: 02/26/04


Date: 26 Feb 2004 20:16:02 GMT


>> 1) Why would ns1.attbi.com keep sending the echo REPLY's?
>
>Did you have your Mandrake machine doing anything with that server? I.e.
>was it set up as your network time protocol server?

I think it's his name server, "ns" is a dead giveaway.

Anyway the ICMP stuff is part of DNS proto IIRC. Maybe someone familiar with
TCP/IP can explain further.

I've seen that in my ethereal logs before and it tripped me out at first. Esp
since I had stopped all traffic, while trying to watch a trojan phone home
(related to something AV found).

Michael



Relevant Pages

  • Re: email critical logs to me
    ... On Thu, 2003-10-23 at 11:14, Genti Hila wrote: ... > I have an Linux Box that acts as an NTP (network time protocol) server and i would like to sent the critical logs, especially if the ntpd daemon stops. ...
    (RedHat)
  • Re: How to start NTPD?
    ... ii ntp-server 4.2.0a-11 Network Time Protocol: ... ntp, ntp-server and ntp-simple. ... There are two server packages: ...
    (Debian-User)
  • RE: Using Public IP address behind a Private DHCP Server
    ... server/device through ISA 2K Server. ... running Internet Security and Acceleration (ISA) Server. ... Configure the Simple Network Time Protocol on ISA ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • NTP Server Please Help
    ... setup/configure an NTP (Network Time Protocol) server ... the network will have to synchronize to this server. ... Do You Yahoo!? ... Mail has the best spam protection around ...
    (comp.protocols.time.ntp)
  • RE: NTP Server in Singapore
    ... 262680 A List of the Simple Network Time Protocol Time Servers That Are ... | Subject: NTP Server in Singapore ... | Organization: Singapore Telecommunications Ltd ... | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158 ...
    (microsoft.public.win2000.active_directory)