Security Incidents mailing list archives

Re: echo requests, 1480 bytes

From: venglin () FREEBSD LUBLIN PL (Przemyslaw Frasunek)
Date: Wed, 16 Feb 2000 08:55:33 +0100


On 09-Feb-2000 Donald McLachlan wrote:

Feb  3 06:24:30 oi iplog[20316]: ICMP: echo from ns-norva.navy.mil (1480
bytes)

Does anyone know what these folks are up to?  I usually see an echo
request from them, followed by an ICMP source quench.  Very odd.


Probably some kind of OpenView network monitoring software. Also OpenView tries
to get some data via SNMP and sends 'HEAD / HTTP/1.0' to webserver.

--
* Fido: 2:480/124 ** WWW: http://www.freebsd.lublin.pl ** NIC-HDL: PMF9-RIPE *
* Inet: venglin () freebsd lublin pl ** PGP: D48684904685DF43  EA93AFA13BE170BF *

Current thread:

Re: echo requests, 1480 bytes Donald McLachlan (Feb 09)
- Ports 41508, 41524 & 41531 Aronius, Joakim (Feb 09)
  - Re: Ports 41508, 41524 & 41531 Rick Ballard (Feb 10)
- Re: echo requests, 1480 bytes Brett Glass (Feb 09)
  - Re: echo requests, 1480 bytes James Lohman (Feb 10)
    - Re: echo requests, 1480 bytes Marc Slemko (Feb 15)
- twinkie Vasiliy Kuznetsov (Feb 15)
  - Re: twinkie Przemyslaw Frasunek (Feb 16)
  - Re: twinkie Pavel Kankovsky (Feb 17)
- Re: echo requests, 1480 bytes Przemyslaw Frasunek (Feb 15)
- <Possible follow-ups>
- Re: echo requests, 1480 bytes Ron Gula (Feb 11)
  - Re: echo requests, 1480 bytes Omachonu Ogali (Feb 15)
- Re: echo requests, 1480 bytes Donald McLachlan (Feb 16)
- Re: echo requests, 1480 bytes Mixmaster (Feb 19)
  - Re: echo requests, 1480 bytes Fengor Wolfsclaw (Feb 22)