North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

IWF was: RE: operational: icmp echo out of control?

  • From: Deepak Jain
  • Date: Tue May 28 16:44:48 2002


-----Original Message-----
From: [email protected] [mailto:[email protected]]On Behalf Of
Mike Tancsa
Sent: Tuesday, May 28, 2002 3:36 PM
To: Jeff Mcadams
Cc: [email protected]
Subject: Re: operational: icmp echo out of control?

[deleted]

The access attempt(s) are shown below, including the date and time, port
number, TCP or UDP indicator, and, if known, a service name associated with
the port.

     Jeu 09 mai 2002 15:30:22, Port 3, ICMP, Destination Unreachable
     Jeu 09 mai 2002 15:30:21, Port 3, ICMP, Destination Unreachable
     Jeu 09 mai 2002 15:30:10, Port 3, ICMP, Destination Unreachable
     Jeu 09 mai 2002 15:30:09, Port 3, ICMP, Destination Unreachable


----

Speaking of IWFs... my personal pet peeve is when people forward you IDS or
Firewall / some other packet log and neglect to provide a timezone and
confirmation the clock was sync'd to a reliable source lately.

For those of us that have the capability of pouring through a few billion
packets to help identify _real_ issues, every few minutes represents
millions of packets.

Explaining the significance of this goes something like this:

NOC: "When was your clock was synchronized with a network time source?"

IWF: "huh?"

[repeat variations of this for at least 5 minutes]

Deepak Jain
AiNET