Smurf-IC is a particular type of Denial-of-Service attack (my network security people never explained in more detail) and it is comming from an IP address of 10.17.2.5. I think that is inside your network and might indic ate a workstation that has been infected with something. If it came from outs ide your network, there usually isn't much the network people can do. z/VM ha s already recognized it as a DOS attack and it is going into the bit-bucket . But an inside IP they might be able do something about. /Tom Kern
On Thu, 10 Jul 2008 13:17:33 -0400, Martin, Terry R. (CMS/CTR) (CTR) <[EMAIL PROTECTED]> wrote: >Hi > >I re-cycled my TCPIP stack and noticed the following message while it >was coming up: > >DTCNET400W A denial-of-service attack has been detected; issue NETSTAT >DOS for more information. > >The output from the NETSTAT DOS command was: > >netstat dos > >VM TCP/IP Netstat Level 530 > >Maximum Number of Half Open Connections: 258 > >Denial of service attacks: > Attacks Elapsed >Attack > >Attack IP Address Detected Time >Duration > >-------- --------------------------------------- --------- --------- >--------- > >Smurf-IC 10.17.2.5 210 0:04:46 >0:04:45 > >Does anyone know what this means and if it is a real problem? It looks >like the ATTACKS number is rising quickly. > >Thank You, >Terry Martin > >Lockheed Martin - Information Technology >z/OS & z/VM Systems - Performance and Tuning >Cell - 443 632-4191 >Work - 410 786-0386 >[EMAIL PROTECTED]
