Usually this would either mean that a packet sent from inside your network could not be routed to its destination before the "time to live" (counted in hops from router to router) expired. It could also mean that someone in your network was using traceroute (or TRACERT from a Windows host) to trace network routes.
In either case it is not likely to be a security issue. Mike Burden Lynk Systems http://www.lynk.com (616)532-4985 [EMAIL PROTECTED] > -----Original Message----- > From: Mason Landrum [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, April 02, 2002 4:57 PM > To: [EMAIL PROTECTED] > Subject: [gb-users] ICMP 11 in GB Logs? > > > Anyone, > > I have been getting a lot of these log messages for about the > last 15 days. Does anyone know why? From what I have read, > ICMP type 11 has something to do with "Time Exceeded" for > packets. However, I am not sure what this means nor why all > the sudden I am getting lots of them. Thanks in advance for > your input? > > -------------------------------------------------------------- > --------------- > ALARM NO: 1 > DATE: Sun 2002-03-31 13:33:03 > PRIORITY: 4 > INTERFACE: EXTERNAL (ep2) > INTERFACE TYPE: External > ALARM TYPE: Block > IP PACKET: ICMP [Some_IP/11]-->[GB_Ext_IP/11] l=32 f=0x0 > > DETAILED DESCRIPTION: > IP packet was rejected by filter 28. > -------------------------------------------------------------- > --------------- > > Sincerely, > Mason Landrum > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > To subscribe to the digest version first unsubscribe, then > e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > Archive of the last 1000 messages: > http://www.mail-archive.com/[email protected] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected]
