[Dshield] ICMP increase

Johannes B. Ullrich jullrich at sans.org
Mon Aug 18 11:57:35 GMT 2003


This message was converted from multipart/signed to ascii armored
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable


Over the last few hours, we detected a remarkable increase in ICMP
traffic. So far I have no idea what this is about. Any insight is
appreciated.

(ICMP shows up as 'port 0' in our protocol ignorant graphs. I will try
and pull some protocol specific data)

http://www.dshield.org/port_report.php?port=0&recax=1&tarax=1&srcax=2&percent=N&days=1


-- 
SANS - Internet Storm Center
http://isc.sans.org
PGP Key: http://isc.sans.org/jullrich.txt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQA/QL8vR1p7hYJvB/wRAthCAKCFXOfVr1+bGw/cko8/7lzX4ijGdgCgluSb
ThL7oQpAXyeTw5rKeAOIoRM-----END PGP SIGNATURE-----

--
SHA1



More information about the list mailing list