Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 29 Oct 1999 15:43:01 -0700 (PDT)
From:      "Eugene M. Kim" <ab@astralblue.com>
To:        Beck David <dbeck@freesoft.hu>
Cc:        FreeBSD Security Mailing List <freebsd-security@FreeBSD.ORG>
Subject:   RE: Strange things on my computer / Help
Message-ID:  <Pine.BSF.4.02A.9910291535480.57991-100000@home.astralblue.com>
In-Reply-To: <1BD5A68BE9E8D211BBE8006094B9EB73E97F@netfinity.freesoft.hu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 29 Oct 1999, Beck David wrote:

| 
| Beck David <dbeck@freesoft.hu> writes:
| > - but the kernel complains in every 10 minutes for some _out_ going
| >   ICMP packets, which goes to two hosts. I am absolutely sure
| >   that nor me nor any of my programs has nothing to do with that hosts
| 
| What kind of ICMP packets? Could you set up a sniffer to capture those
| packets? (tcpdump will do). They may be completely benign (e.g.
| ICMP_UNREACH or ICMP_TIMXCEED)
| 
| -----------
| - The ICMP type is 3.3: port unreachable

An ICMP 3.3 packet is usually generated when someone tries to reach a
UDP port for which there is no listener running on your host.  Not sure
if your version of FreeBSD supports it, but if you turn on `log in vain'
feature (add log_in_vain=YES to /etc/rc.conf) a kernel message is
generated for each failed TCP/UDP connection attempt.

Hope this helped,
Eugene

-- 
Eugene M. Kim <ab@astralblue.com>

"Is your music unpopular?  Make it popular; make music
which people like, or make people who like your music."




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.02A.9910291535480.57991-100000>