-----Original Message----- From: Danny Wong <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Date: Monday, February 21, 2000 5:38 PM Subject: help >I found the following in our log file. And I am still waiting for help from >our isp. >Do you think it is a DDos? Or something else. How can I find the actual >sourc of it? Also, I found no abnormal traffic before it. > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 208.45.133.3 a.b.c.d >in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 216.52.239.2 a.b.c.d >in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 206.86.106.3 a.b.c.d >in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 198.170.164.3 a.b.c.d >in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 203.131.227.2 a.b.c.d >in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 210.175.166.8 a.b.c.d >in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 210.180.22.3 a.b.c.d >in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 212.78.162.3 a.b.c.d >in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 203.126.212.130 >a.b.c.d in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 212.36.169.97 a.b.c.d >in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 212.121.130.40 >a.b.c.d in via xl0 >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 212.35.98.3 a.b.c.d >in via xl0 - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
