[Dshield] ICMP Traffic ??

Frank Knobbe frank at knobbe.us
Thu Apr 12 16:30:00 GMT 2007


On Wed, 2007-04-11 at 17:42 -0500, Basiru Ndow wrote:
>  This IP is not a valid IP in our network but it kind of looks like
> the IP of one of our desktop management servers but for one digit
> ( eg. 198.215.77.99- our server and  198.25.77.99-- the server all
> ICMP request are directed to). [...] My next step with our desktop
> group to see if the reporting agents on the desktops were not properly
> configured to report to the wrong server IP. 

Yeah, it definitely looks like a typo (someone hit 2-1 instead of just
2). Check with your network/systems group.

-Frank

-- 
It is said that the Internet is a public utility. As such, it is best
compared to a sewer. A big, fat pipe with a bunch of crap sloshing
against your ports.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.sans.org/pipermail/list/attachments/20070412/d30246d6/attachment.bin 


More information about the list mailing list