Hello

I have ippl installed and have started it as 'nohup ippl -n' 8 days ago. It 
has worked well, but now there are two things I wonder about. 

- yesterday there were 47 echo requests from 30 different origins within half 
an hour. This hasn't happened the 8 days before. The only way I can explain 
that is either that someone sent requests with spoofed sender ip adresses, or 
that ippl isn't working correctly. It's strange that all 30 ip's except one 
have a valid dns entry.

- Just after this, ippl stopped working: there weren't any more messages even 
when I ping'd my machine myself. With 'ps' I saw it still running (4 
threads). Another instance 'ippl -n' started in a terminal worked. 'killall 
ippl' stopped all of them and led the old ippl instance to write the 
'stopped' message to the log:
(...)
Jun 26 13:55:48 ICMP message type echo request from c122s7h5.upc.chello.no 
[212.186.118.122]
Jun 26 13:55:48 port 8007 connection attempt from localhost [127.0.0.1]
Jun 26 13:56:06 last message repeated 8 time(s)
Jun 26 13:56:18 ICMP message type echo request from 24-164-142-190.si.rr.com 
[24.164.142.190]
Jun 26 13:56:18 port 8007 connection attempt from localhost [127.0.0.1]
Jun 26 13:56:27 ICMP message type echo request from 36-174.engelholm.se 
[195.216.36.174]
Jun 26 13:56:27 port 8007 connection attempt from localhost [127.0.0.1]
Jun 26 13:56:48 last message repeated 11 time(s)
Jun 26 13:56:50 ICMP message type echo request from 36-174.engelholm.se 
[195.216.36.174]
(... more echo requests...)
Jun 26 14:25:22 ICMP message type echo request from 
co3042367-a.rochd1.qld.optushome.com.au [203.164.196.110]
Jun 26 14:25:22 port 8007 connection attempt from localhost [127.0.0.1]
Jun 27 12:39:27 IP Protocols Logger: stopped (signal 15).

So it really seems that ippl hung just after (or while?) these strange echo 
requests. Were these 'ping of death' or something that ippl couldn't handle? 

Christian.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to