Re: query about firewall log entries

Discussion in 'Computer Security' started by Maxime Ducharme, Aug 25, 2003.

  1. Hi,
    for more information read posts about "Continuous Ping Requests"
    sent 22th of this month.

    ICMP (type:8/subtype:0) is a "ping" request. It used used to know
    if a host is alive.

    Some new viruses like Welchia use this before trying to infect
    other computers. The reason why you get more than usual
    is because Welchia is kinda new, already infected alot of computer
    by this time and still trying to spread around.

    Ciao

    ---------------------------------------------------------------
    Maxime Ducharme
    Administrateur reseau, Programmeur


    ----- Original Message -----
    From: "Mat" <>
    Newsgroups: alt.computer.security,comp.security.firewalls
    Sent: Monday, August 25, 2003 1:38 PM
    Subject: query about firewall log entries


    > Greetings
    >
    > For a few days now I've noticed a lot more activity in my ZoneAlarm

    Firewall
    > log. I wondered if anyone could shed some light on its relevance and/or
    > whether I should be concerned.
    >
    > The 'hits' that it is registering are all listed in the Protocol section

    of
    > the log as:
    >
    > ICMP (type:8/subtype:0)
    >
    > and are mostly from IPs in the region
    >
    > 62.13x.xxx.xxx
    >
    > Is this unusual activity?
    >
    > Any information greatly appreciated.
    >
    >
    >
     
    Maxime Ducharme, Aug 25, 2003
    #1
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Brian Bergin

    127.0.0.1 log entries

    Brian Bergin, Nov 21, 2003, in forum: Cisco
    Replies:
    7
    Views:
    980
  2. John Ramsden
    Replies:
    0
    Views:
    922
    John Ramsden
    Jul 24, 2004
  3. Bill F
    Replies:
    1
    Views:
    645
    Hansang Bae
    Jan 11, 2005
  4. TheKeith
    Replies:
    4
    Views:
    511
    TheKeith
    Jul 31, 2004
  5. srm

    Lots of entries in 404 log

    srm, Feb 24, 2005, in forum: Computer Security
    Replies:
    7
    Views:
    580
    xXGogetaXx
    Mar 3, 2005
Loading...

Share This Page