Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 31 May 2000 13:05:46 -0500
From:      "Jeremy L. Ramirez" <jramirez@xlinet.net>
To:        Visigoth <visigoth@telemere.net>, Mitch Collinsworth <mkc@Graphics.Cornell.EDU>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: icmp-response bandwidth limit
Message-ID:  <3.0.6.32.20000531130546.0094c160@200.8.8.2>
In-Reply-To: <Pine.BSF.4.21.0005311240420.27679-100000@shell.telemere.ne t>
References:  <200005311729.NAA17118@larryboy.graphics.cornell.edu>

next in thread | previous in thread | raw e-mail | index | archive | help

Can also come from well known bandwidth measurement tools (bing, et al).  

I have seen this happen a few times.  If not you then someone is probably
snooping around looking for information, as Damieon said, not very nice.

 Good luck,
  Jeremy Ramirez
  jramirez@xlinet.net

At 12:44 PM 5/31/2000 -0500, Visigoth wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>
>
>	This type of kernel message generally denotes one of two things,
>neither of which are usually nice.  icmp-response bandwidth limiting is
>built into the kernel to lessen the effects of a ping flood, and are often
>the result of being flooded, but I have also noticed that message due to
>scans such as nmap.  Either way, something happened that you will probably
>want to know about...  I might recomend installing ipfilter and logging
>all traffic except your known/public services (and maybe even some of
>those ;).
>
>Visigoth
>
>
>
>Damieon Stark
>Sr. Unix Systems Administrator
>visigoth@telemere.net
>
>PGP Public Key: www.telemere.net/~visigoth/visigoth.asc
>
>____________________________________________________________________________
>					|
>M$ -Where do you want to go today?	|
>Linux -Where do you want to go tomorrow?|   FreeBSD - The POWER to serve
>Freebsd -Are you guys comming or what?	|   http://www.freebsd.org
>					|
>					|
>-
----------------------------------------------------------------------------
>
>-----BEGIN PGP SIGNATURE-----
>Version: PGPfreeware 5.0i for non-commercial use
>Charset: noconv
>
>iQA/AwUBOTVBjznmC/+RTnGeEQK/ZgCaA49njCV3Mn0QmzzjViG7s9PUygUAoM6Y
>jXN3p6dfTQJ4ieOpCN2YwB1i
>=xWXK
>-----END PGP SIGNATURE-----
>
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-security" in the body of the message
>
>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3.0.6.32.20000531130546.0094c160>