Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: ICMP - call for packets ? - SANS Internet Storm Center SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
ICMP - call for packets ?

One of our readers is reporting a fairly recent increase in ICMP packets hitting his firewall. If you're seeing the same we'd like some data:

  • on the importance and timeframe of the increase;
  • the type of ICMP packets you're receiving;
  • some idea of how it correlates (sweeping your address range, just hitting one IP, coming from all over, coming from specific hosts, ...);
  • if possible a small sample of some out of the ordinary packet captures.
As always you can upload your results through our contact form.

Swa Frantzen -- Section 66


760 Posts
Dec 12th 2006

Sign Up for Free or Log In to start participating in the conversation!