[Dshield] ICMP Traffic ??
frank at knobbe.us
Thu Apr 12 16:30:00 GMT 2007
On Wed, 2007-04-11 at 17:42 -0500, Basiru Ndow wrote:
> This IP is not a valid IP in our network but it kind of looks like
> the IP of one of our desktop management servers but for one digit
> ( eg. 22.214.171.124- our server and 126.96.36.199-- the server all
> ICMP request are directed to). [...] My next step with our desktop
> group to see if the reporting agents on the desktops were not properly
> configured to report to the wrong server IP.
Yeah, it definitely looks like a typo (someone hit 2-1 instead of just
2). Check with your network/systems group.
It is said that the Internet is a public utility. As such, it is best
compared to a sewer. A big, fat pipe with a bunch of crap sloshing
against your ports.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.sans.org/pipermail/list/attachments/20070412/d30246d6/attachment.bin
More information about the list