[878] in resnet
huge spike in ICMP traffic
daemon@ATHENA.MIT.EDU (Edward Chase)
Fri Feb 22 15:34:43 2002
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Message-ID: <5.1.0.14.0.20020222145457.02360958@postoffice.providence.edu>
Date: Fri, 22 Feb 2002 15:23:39 -0500
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Edward Chase <echase@POSTOFFICE.PROVIDENCE.EDU>
To: RESNET-L@listserv.nd.edu
Last night / early this morning our network experienced a huge spike in
ICMP traffic.
As far as I know our firewall should be stopping this type of traffic from
flowing in and out of our campus. It definitely seems to be stopping the
inbound traffic, yet appears to be allowing some of the outbound. I'm not
sure why yet, I've got a message off to our support people.
My question... Does anyone know of any new application or virus that works
using ICMP traffic?
(Here's where my lack of understanding the traffic the wire shows...)
---------------------------------------------------------------
Edward F. Chase III | echase@providence.edu
Providence College | http://www.providence.edu
Computer Services | http://studentweb.providence.edu
Providence, RI 02918 |
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
