It was most likely a traceroute. Once ping figures out that the next hop is the target instead of an echo reuquest it sends a UDP packet to some very high numbered port.
At 02:22 PM 4/11/2002 -0700, Jim MacLeod wrote: >To explain UDP and ICMP (ping) I'd guess traceroute. Windows clients tend >to use ping, unix clients tend to use high-port UDP. The mix might imply >ping and traceroute from a unix box. > >The question I would have next is why traffic from outside to outside is >being erroneously routed towards your Pix. Default route on an external >device? > >-Jim MacLeod > >At 10:01 AM 4/11/2002, Matthew Carpenter wrote: > >>What about the UDP requests under the same entry? >> >>-----Original Message----- >>From: Olaf Schreck [mailto:[EMAIL PROTECTED]] >>Sent: Thursday, April 11, 2002 11:55 AM >>To: [EMAIL PROTECTED] >>Subject: Re: PIX SYSLOG entries >> >> > Apr 11 2002 11:37:59: %PIX-3-106011: Deny inbound (No xlate) icmp src >> > outside:208.185.54.14 dst outside:208.249.103.99 (type 8, code 0) >> >>ping from 208.185.54.14 (ICMP type 8, code 0) >> >>ciao, >>chakl >>-- >>Olaf Schreck - Syscall Network Solutions AG, Berlin >>_______________________________________________ >>Firewalls mailing list >>[EMAIL PROTECTED] >>http://lists.gnac.net/mailman/listinfo/firewalls > > >_______________________________________________ >Firewalls mailing list >[EMAIL PROTECTED] >http://lists.gnac.net/mailman/listinfo/firewalls _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
