[unisog] Port 0

jeff murphy jcmurphy at oss.buffalo.edu
Fri Oct 28 03:05:04 GMT 2005


This probably isn't alarming. Juniper firewalls, for example, put a 0 in
the 'port' field of their log reports as a placeholder for ICMP packets
as well as non-TCP/UDP IP protocol packets. 

e.g.

> get log self
==================================================================================
Date       Time       Duration Source IP        Port Destination IP
Port Service
==================================================================================
2005-10-27 22:49:00    0:00:00 128.205.10.254      0 224.0.0.1
0 IP PROTOCOL 2



jeff


On Fri, 2005-10-28 at 08:37 +1000, Leigh Vincent wrote:
> This seems very strange.  
> 
> >>> CHRISTENSENE at MAIL.ECU.EDU 10/27/05 11:59 pm >>>
> I was reviewing my firewall logs this morning and found a few packets
> going
> to and from port 0.  Apparently they were ICMP packets. 






More information about the unisog mailing list