Re: Ping of Dead on LAN

[Steve Hatch]

If you're domain controllers are trying to push group policies, it sends 
a large uncompressable ping to determine the link speed.  It is possible 
that it could be seen by the firewall as a ping of death.

On Mon, 14 Jul 2003 3:58PM -0800, Roger A. Grimes wrote:
I've installed dozens of Sonicwalls, and I can tell you that isn't a 
normal
symptom.

We need more details...when do the POD's happen...?  As soon as the 
machine
is turned on (before XP is loaded), all the time, randomly....give us 
more
details.

If I was you, I'd disable services and use netstat -ano to find out 
what
service or program is generating the false-positive traffic (if it is
false-positive traffic).

Turn on SW's packet sniffing features and capture a few packets...and 
take a
look.

Roger

----- Original Message -----
From: "Darren Gragg" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 14, 2003 4:50 PM
Subject: Ping of Dead on LAN

 I have a problem that SonicWALL can't seem to figure out and I'm 
running
out
 of ideas myself.  We have a main location where our DC is with our
branches
 connected via t-1 lines.  Also at the main location is a SonicWALL pro
200.
 Each time I install a Windows XP Pro machine at our branch locations 
it
 creates more and more Ping of Death Blocked entries in our firewall 
log.
 Does anyone have any ideas?  Any help would be great!

 Darren Gragg
 CTO
 --------------------------------------------------------------------------
-
 Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top 
analysts!
 The Gartner Group just put Neoteris in the top of its Magic Quadrant,
 while InStat has confirmed Neoteris as the leader in marketshare.

 Find out why, and see how you can get plug-n-play secure remote 
access in
 about an hour, with no client, server changes, or ongoing maintenance.

 Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
 --------------------------------------------------------------------------
--



---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top 
analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access 
in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------
---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
    
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
         
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------