NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] icmp packet drops?



global properties, probably the nathci ? virus
----- Original Message -----
From: "Matt Kehler" <[email protected]>
To: <[email protected]>
Sent: Friday, August 22, 2003 5:43 PM
Subject: [FW-1] icmp packet drops?


Out of nowhere, I seem to be getting a lot of ICMP drops as per below.  Any
reason why I would be getting these out of nowhere? Since they are not rule
generated; how can I turn off the logging on them? A setting in global
properties I assume, or can I do it per enforcement module? NG AI on IPSO
3.7 build 23.


Number:         1159
Date:                   22Aug2003
Time:                   11:37:27
Product:                SmartDefense
Interface:              eth1c0
Origin:                 xxxxxxxxxxxxx
Type:                   Log
Action:                 Drop
Protocol:               icmp
Source:                 xxxxxxxxxxxxxxxxxx
Destination:    xxxxxxxxxxxxxxxxxxx
Attack Name:    Large ping
Information:    Packet data size: 75
                        Attack Info: Echo request too long
                        icmp-type: 8
                        icmp-code: 0

thx
Matt

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.