Security Basics mailing list archives

RE: icmp echo-requests?


From: "Timothy M. Lyons" <lyons () digitalvoodoo org>
Date: Fri, 22 Nov 2002 12:44:42 -0500

Microsoft traceroute (tracert) uses ICMP Echo-Request packets with a
short TTL.

-----Original Message-----
From: rjuerrens () web de [mailto:rjuerrens () web de] On Behalf Of JR
Sent: Wednesday, November 20, 2002 03:21
To: security-basics () securityfocus com
Subject: icmp echo-requests?


Hi everyone,

in my firewall logs I see a lot of echo-requests within the internal
network. Of course, the simplest answer to these events is that pings
are causing these events. But on these machines definitely no pings are
startet to that times. Is it possible that other kind of programs  are
using echo-requests? What kind of programs are using echo-requests and
why? Checking wether the other host ist up? What if the firewall is
filtering echo-requests? The program would think that the host is
down...

Greetings!
JR


________________________________________________________________________
______
Erster Klick - SMS versenden, zweiter Klick - die Telefonnummer im 
Adressbuch speichern bei: http://freemail.web.de/features/?mc=021151



Current thread: