-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Mike Tancsa
Sent: Tuesday, May 28, 2002 3:36 PM
To: Jeff Mcadams
Cc: [EMAIL PROTECTED]
Subject: Re: operational: icmp echo out of control?
[deleted]
The access attempt(s) are shown below, including the date and time, port
number, TCP or UDP indicator, and, if known, a service name associated with
the port.
Jeu 09 mai 2002 15:30:22, Port 3, ICMP, Destination Unreachable
Jeu 09 mai 2002 15:30:21, Port 3, ICMP, Destination Unreachable
Jeu 09 mai 2002 15:30:10, Port 3, ICMP, Destination Unreachable
Jeu 09 mai 2002 15:30:09, Port 3, ICMP, Destination Unreachable
----
Speaking of IWFs... my personal pet peeve is when people forward you IDS or
Firewall / some other packet log and neglect to provide a timezone and
confirmation the clock was sync'd to a reliable source lately.
For those of us that have the capability of pouring through a few billion
packets to help identify _real_ issues, every few minutes represents
millions of packets.
Explaining the significance of this goes something like this:
NOC: "When was your clock was synchronized with a network time source?"
IWF: "huh?"
[repeat variations of this for at least 5 minutes]
Deepak Jain
AiNET
