From owner-freebsd-security Wed May 31 10:55:36 2000 Delivered-To: freebsd-security@freebsd.org Received: from noc.hscil.net (noc.hscil.net [209.100.81.135]) by hub.freebsd.org (Postfix) with ESMTP id DC95F37B8DF for ; Wed, 31 May 2000 10:55:25 -0700 (PDT) (envelope-from jramirez@xlinet.net) Received: from noc05 (noc05.hscil.net [200.8.8.124]) by noc.hscil.net (8.9.3/8.9.3) with SMTP id MAA29136; Wed, 31 May 2000 12:51:52 -0500 (CDT) (envelope-from jramirez@xlinet.net) Message-Id: <3.0.6.32.20000531130546.0094c160@200.8.8.2> X-Sender: jramirez@200.8.8.2 X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.6 (32) Date: Wed, 31 May 2000 13:05:46 -0500 To: Visigoth , Mitch Collinsworth From: "Jeremy L. Ramirez" Subject: Re: icmp-response bandwidth limit Cc: freebsd-security@FreeBSD.ORG In-Reply-To: References: <200005311729.NAA17118@larryboy.graphics.cornell.edu> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Can also come from well known bandwidth measurement tools (bing, et al). I have seen this happen a few times. If not you then someone is probably snooping around looking for information, as Damieon said, not very nice. Good luck, Jeremy Ramirez jramirez@xlinet.net At 12:44 PM 5/31/2000 -0500, Visigoth wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > > > > This type of kernel message generally denotes one of two things, >neither of which are usually nice. icmp-response bandwidth limiting is >built into the kernel to lessen the effects of a ping flood, and are often >the result of being flooded, but I have also noticed that message due to >scans such as nmap. Either way, something happened that you will probably >want to know about... I might recomend installing ipfilter and logging >all traffic except your known/public services (and maybe even some of >those ;). > >Visigoth > > > >Damieon Stark >Sr. Unix Systems Administrator >visigoth@telemere.net > >PGP Public Key: www.telemere.net/~visigoth/visigoth.asc > >____________________________________________________________________________ > | >M$ -Where do you want to go today? | >Linux -Where do you want to go tomorrow?| FreeBSD - The POWER to serve >Freebsd -Are you guys comming or what? | http://www.freebsd.org > | > | >- ---------------------------------------------------------------------------- > >-----BEGIN PGP SIGNATURE----- >Version: PGPfreeware 5.0i for non-commercial use >Charset: noconv > >iQA/AwUBOTVBjznmC/+RTnGeEQK/ZgCaA49njCV3Mn0QmzzjViG7s9PUygUAoM6Y >jXN3p6dfTQJ4ieOpCN2YwB1i >=xWXK >-----END PGP SIGNATURE----- > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message