From owner-freebsd-security Fri Nov 23 12: 7:27 2001 Delivered-To: freebsd-security@freebsd.org Received: from teardrop.ca (d141-197-100.home.cgocable.net [24.141.197.100]) by hub.freebsd.org (Postfix) with ESMTP id 2B7D137B405 for ; Fri, 23 Nov 2001 12:07:15 -0800 (PST) Received: from teardrop.ca (cfikoswz@teardrop.ca [24.141.197.100]) by teardrop.ca (8.11.6/8.11.6) with ESMTP id fANK75v19051; Fri, 23 Nov 2001 15:07:05 -0500 (EST) (envelope-from teardrop@teardrop.ca) X-Authentication-Warning: teardrop.ca: mail owned process doing -bs Date: Fri, 23 Nov 2001 15:07:05 -0500 (EST) From: Paul Miseiko To: Fernando Germano Cc: security@FreeBSD.ORG Subject: Re: What's this? In-Reply-To: <006c01c17451$9d97aa60$ed64a8c0@audi2k> Message-ID: <20011123150438.G18954-100000@teardrop.ca> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org The result of a ICMP flood, i'd imagine. You set ICMP_BANDLIM in the kernel. Paul Miseiko /\/ esoteric@EFNet /\/ http://teardrop.ca On Fri, 23 Nov 2001, Fernando Germano wrote: > > I've found many of these, are these the result of a portscan or something > like that???, how do you read this line??? > > Nov 23 11:11:50 server /kernel: icmp-response bandwidth limit 187/100 pps > Nov 23 11:11:51 server /kernel: icmp-response bandwidth limit 264/100 pps > > > Thanks you > Fernando > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message