From owner-freebsd-questions@FreeBSD.ORG Tue May 13 07:02:46 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5B9C937B401 for ; Tue, 13 May 2003 07:02:46 -0700 (PDT) Received: from devil.stderror.at (at00d01-adsl-194-118-044-149.nextranet.at [194.118.44.149]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6D62643F3F for ; Tue, 13 May 2003 07:02:43 -0700 (PDT) (envelope-from pinhead@stderror.at) Received: by devil.stderror.at (Postfix, from userid 1000) id B405E15253; Tue, 13 May 2003 16:02:41 +0200 (CEST) Date: Tue, 13 May 2003 16:02:41 +0200 From: Toni Schmidbauer To: freebsd-questions@FreeBSD.ORG Message-ID: <20030513140241.GB47458@devil.stderror.at> Mail-Followup-To: freebsd-questions@FreeBSD.ORG References: <3EC0F7AA.7090203@buddydog.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="Bn2rw/3z4jIqBvZU" Content-Disposition: inline In-Reply-To: <3EC0F7AA.7090203@buddydog.org> User-Agent: Mutt/1.4.1i Subject: Re: Pings X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: toni@stderror.at List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 May 2003 14:02:46 -0000 --Bn2rw/3z4jIqBvZU Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, May 13, 2003 at 09:48:26AM -0400, Jonathan Arnold wrote: > I'm am getting regular, 1 second pings from an IP run by a South > African ISP. If it wasn't for my DSL modem blinking right in front > of me like a metronome, I probably wouldn't even notice it. And > by using Ethereal (a packet sniffer) I can see the regular Pings > coming in from there, although it recently changed IP address > slightly. >=20 > Now, it isn't enough to even remotely qualify as a DOS attack. It > is merely one ping every second, sort of like checking to see if > I'm still up. But nonetheless, it is annoying. I was wondering if > anyone had any ideas what they might be up to? I've reported it > to abuse on both my ISP and the controlling ISP, and it is slowly > working its way through to resolution, but I'm still curious. we had a similar effect when one of our aix nameservers used icmp echo request packets for path mtu discovery. when a customer queried the server he received one echo request packet. just an idea hth, toni --=20 Behandle die Menschen, als w=E4ren sie, was sie sein | toni at stderror dot= at sollten, und du wirst ihnen helfen, zu werden, was | Toni Schmidbauer sie sein k=F6nnen. - Johann Wolfgang von Goethe | --Bn2rw/3z4jIqBvZU Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE+wPsAu/mjSj7RMocRAlR6AJ9cuksvfbC1a7whIRCAfcw50nQxIgCeK6sR 3Rqg048yf/89KfKaPCnE08k= =M+XU -----END PGP SIGNATURE----- --Bn2rw/3z4jIqBvZU--