Re: constant pinging

From: Tracker (TheTrackers000REMOVE@yahoo.com)
Date: 10/29/02 

From: Tracker <TheTrackers000REMOVE@yahoo.com>
Date: Tue, 29 Oct 2002 06:22:37 +0300

JM wrote:

> A while ago, I wrote here about my activity light blinking once every ten
> seconds apart. I finally figured out what it was. Pinging...Just constant
> pinging all day long. Even this drowns out the hits on port 137.
>
> Here's a small section of my logs. You know this makes a BIG file after a
> while.
>
> 10/29/2002 04:48:09 PPP Rx: [1], proto=c021 code=9 sid=a5e7
> 10/29/2002 04:48:09 PPP Rx: [1], echo request
> 10/29/2002 04:48:09 PPP Tx: [1], proto=c021 code=10 sid=a5e7
> 10/29/2002 04:48:09 PPP Tx: [1], echo reply
> 10/29/2002 04:48:19 PPP Rx: [1], proto=c021 code=9 sid=a5e7
> 10/29/2002 04:48:19 PPP Rx: [1], echo request
> 10/29/2002 04:48:19 PPP Tx: [1], proto=c021 code=10 sid=a5e7
> 10/29/2002 04:48:19 PPP Tx: [1], echo reply
> 10/29/2002 04:48:29 PPP Rx: [1], proto=c021 code=9 sid=a5e7
> 10/29/2002 04:48:29 PPP Rx: [1], echo request
> 10/29/2002 04:48:29 PPP Tx: [1], proto=c021 code=10 sid=a5e7
> 10/29/2002 04:48:29 PPP Tx: [1], echo reply
> 10/29/2002 04:48:39 PPP Rx: [1], proto=c021 code=9 sid=a5e7
> 10/29/2002 04:48:39 PPP Rx: [1], echo request
> 10/29/2002 04:48:39 PPP Tx: [1], proto=c021 code=10 sid=a5e7
> 10/29/2002 04:48:39 PPP Tx: [1], echo reply
> 10/29/2002 04:48:49 PPP Rx: [1], proto=c021 code=9 sid=a5e7
> 10/29/2002 04:48:49 PPP Rx: [1], echo request
> 10/29/2002 04:48:49 PPP Tx: [1], proto=c021 code=10 sid=a5e7
> 10/29/2002 04:48:49 PPP Tx: [1], echo reply

This log means nothing to no one.

Tracker

Relevant Pages

  • Re: constant pinging
    ... I wrote here about my activity light blinking once every ten ... > Here's a small section of my logs. ... (ask them to get confirmation) ... have a flaky connection. ...
    (comp.security.misc)
  • constant pinging
    ... I wrote here about my activity light blinking once every ten ... pinging all day long. ... Even this drowns out the hits on port 137. ... Here's a small section of my logs. ...
    (comp.security.misc)
  • Re: Strange WAN Activity
    ... > firewall logs for a possible TCP FIN scan that keeps ... > company's intranet server IP and its port 80 across our ... > My firewall is a Sonicwall Pro 200 and I'm running W2K ... It's difficult to be sure without inspecting the web server for signs of ...
    (microsoft.public.win2000.security)
  • Re: Identifying Internet Attacks
    ... contain the hacker to a particular machine, leave the machine on the network ... Some firewall software such as ... open ports; however, this will not identify which program is using the port. ... firewall logs, the IIS web and ftp server logs and Windows security event ...
    (microsoft.public.inetserver.iis.security)
  • Re: false portscan alarm
    ... What is the reason of that treffic? ... and the browser and/or the "personal firewall" had decided to close those ... which each have a local source port above 1024 opened outgoing to port 80 ... I've had a dig through my own PIX logs, and while there is nothing for today ...
    (comp.security.firewalls)