Re: ICMP type 12 packets

From: Thomas Springer (tuevat_private)
Date: Fri Jun 21 2002 - 14:14:31 PDT

  • Next message: Wesley: "Analyse Worm18000"

    At 11:18 21.06.2002 -0700, you wrote:
    >I am seeing ICMP type 12 packets being returned to my network from various 
    
    same here - > 2.500 packets starting 5/23, snort talking about 6 sources
    and 29 (partially inactive) destinations:
    
    source                                         # of packts        Dest. Ips
    24.220.1.46     gw-mit.midco.net                   13                1     
    172.22.2.1      Unable to resolve address          589               9     
    172.22.8.2      Unable to resolve address          1162              10     
    194.177.40.242  xl0.kapoue.europeonline.net        141               3     
    207.71.212.246  core0.3xt.org                      1                 1
    209.134.172.25  ip-209-134-172-25.iss.net          560               5     
    
    iss.net ?? 172.22.* 
    
    wondering,
    
    ts
    
    Thomas Springer
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Fri Jun 21 2002 - 14:22:00 PDT