[unisog] Port 0

Leigh Vincent l.vincent at ballarat.edu.au
Thu Oct 27 22:37:52 GMT 2005


This seems very strange.  Is there any chance you could give us a sample
of the log file to have a look at.  Mask out the IP addresses etc
obviously but I think there are many of us who would be interested to
see these log entries.

Cheers

Leigh Vincent
Information Security Officer
Information Services
University of Ballarat
PO Box 663
BALLARAT   VIC   3353

Ph.: 03-5327 9386
Mobile: 0439 357 203 
l.vincent at ballarat.edu.au

>>> CHRISTENSENE at MAIL.ECU.EDU 10/27/05 11:59 pm >>>
I was reviewing my firewall logs this morning and found a few packets
going
to and from port 0.  Apparently they were ICMP packets.  I think that
is
probably legitimate but I'm thinking that many computers might accept
these
packets thinking they are legit when they are really attacks.  If they
are
just ICMP packets you could just block them.  Right?

Thanks,
Eric Christensen
Technology Support Specialist
 
ECU Police Department
608C E 10th St
Greenville NC 27858-4353
http://www.ecu.edu/police 

EMERGENCY DIAL 911 
(252)328-1155 - Office
(252)328-6787 - 911 Communications
(252)328-6965 - Fax


More information about the unisog mailing list