Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: InfoSec Handlers Diary Blog InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

ICMP - call for packets ?

Published: 2006-12-12
Last Updated: 2006-12-12 15:49:25 UTC
by Swa Frantzen (Version: 1)
0 comment(s)

One of our readers is reporting a fairly recent increase in ICMP packets hitting his firewall. If you're seeing the same we'd like some data:

  • on the importance and timeframe of the increase;
  • the type of ICMP packets you're receiving;
  • some idea of how it correlates (sweeping your address range, just hitting one IP, coming from all over, coming from specific hosts, ...);
  • if possible a small sample of some out of the ordinary packet captures.
As always you can upload your results through our contact form.

--
Swa Frantzen -- Section 66


Keywords:
0 comment(s)
Diary Archives