[unisog] Port 0
jcmurphy at oss.buffalo.edu
Fri Oct 28 03:05:04 GMT 2005
This probably isn't alarming. Juniper firewalls, for example, put a 0 in
the 'port' field of their log reports as a placeholder for ICMP packets
as well as non-TCP/UDP IP protocol packets.
> get log self
Date Time Duration Source IP Port Destination IP
2005-10-27 22:49:00 0:00:00 126.96.36.199 0 188.8.131.52
0 IP PROTOCOL 2
On Fri, 2005-10-28 at 08:37 +1000, Leigh Vincent wrote:
> This seems very strange.
> >>> CHRISTENSENE at MAIL.ECU.EDU 10/27/05 11:59 pm >>>
> I was reviewing my firewall logs this morning and found a few packets
> to and from port 0. Apparently they were ICMP packets.
More information about the unisog