Limiting icmp

Ivo Hazmuk ivo at vutbr.cz
Thu Nov 15 17:31:36 CET 2001


> 	Vysilani techto zprav (ty zpravy jsou vysilany, nikoli prijimany,
> jak nespravne uvadi p. Hazmuk) ma jiste nejaky duvod, ale ten se z uvedenych
> hlasek neda poznat. Jedna z moznosti je portscanning ...

Jo omlouvam se za omyl. Mel bych jit domu.

jaguar: # date
Thu Nov 15 17:23:15 CET 2001
jaguar: # ping -f fox PING fox (24): 56 data bytes
............................................................................
--- fox ping statistics ---
491 packets transmitted, 45 packets received, 90% packet loss
round-trip min/avg/max/stddev = 0.352/0.421/0.542/0.053 ms
jaguar: #

tcpdump na lisce rika:
...
17:23:28.744792 .15 > .24: icmp: echo request
17:23:28.744859 .24 > .15: icmp: echo reply
17:23:28.745284 .15 > .24: icmp: echo request
17:23:28.745355 .24 > .15: icmp: echo reply
17:23:28.745761 .15 > .24: icmp: echo request
17:23:28.745821 .24 > .15: icmp: echo reply
17:23:28.746227 .15 > .24: icmp: echo request
17:23:28.746286 .24 > .15: icmp: echo reply
17:23:28.746685 .15 > .24: icmp: echo request
17:23:28.764152 .15 > .24: icmp: echo request
17:23:28.784169 .15 > .24: icmp: echo request
17:23:28.804162 .15 > .24: icmp: echo request
17:23:28.824158 .15 > .24: icmp: echo request
17:23:28.844153 .15 > .24: icmp: echo request
17:23:28.864154 .15 > .24: icmp: echo request
17:23:28.884158 .15 > .24: icmp: echo request
...

A /var/log/messages na lisce:

Nov 15 17:23:14 fox /kernel: tx0: promiscuous mode enabled
Nov 15 17:23:44 fox /kernel: Limiting icmp ping response from 46 to 5 packets per second
Nov 15 17:23:44 fox /kernel: Limiting icmp ping response from 56 to 5 packets per second
Nov 15 17:23:44 fox last message repeated 7 times
Nov 15 17:23:44 fox /kernel: tx0: promiscuous mode disabled

Do foxe prislo par set ICMP echo requestu a povoleno bylo 5 ICMP paketu/s.

	Ivosh




More information about the Users-l mailing list