Security Incidents mailing list archives

Re: ICMP Parameter Problem packets to random addresses


From: Jeff Kell <jeff-kell () utc edu>
Date: Tue, 19 Jun 2001 21:31:32 -0400

Ofir Arkin wrote:

Russell,

This can also be a chain reaction for a decoy scan attempt using IPs 
from your network, when scanning the target 194.42.253.254

Now wait just a minute here, I recorded several dozen "ICMP parameter
problems" FROM 194.42.253.254 last night between 5 and 11 PM EST to
various hosts on our network.  Too bizarre to be a co-incidence.

Jeff


Current thread: