Re: IP Unknown Protocol

["Portnoy, Gary" <gportnoy () BELENOSINC COM>]

IP Protocol 57 is SKIP. Maybe you have some sort of
encryption/authentication going on between internal hosts that's running a
little out of whack?

Gary Portnoy
Network Administrator
617-345-6252
gportnoy () belenosinc com
www.belenosinc.com

PGP Fingerprint: 9D69 6A39 642D 78FD 207C  307D B37D E01A 2E89 9D2C

> -----Original Message-----
> From: Booke, Raymond [mailto:Raymond.Booke () AVNET COM]
> Sent: Thursday, February 08, 2001 9:33 AM
> To: INCIDENTS () SECURITYFOCUS COM
> Subject: IP Unknown Protocol
>
>
> My logs have been showing up with a lot of IPUnknownProtocol errors
> attempting to use a TCP protocol of 57.  Most of these
> messages have come
> from internal machines, and I am wondering if anyone else has
> seen anything
> of this nature.  I am pretty sure it isn't a trajan, but I
> had better be
> sure.  Thanks
>               
>
> Raymond Booke MCSE CCNA NET+ A+
> Global Data Security Group
> Perimeter Security Analyst
> Avnet INC
> Raymond.Booke () avnet com
> 480-643-6960