nevermind...as soon as I hit send I realized it was SmartDefense.
bad day :(
Matt
>>> mkehler AT WRHA.MB DOT CA 08/22/03 11:43AM >>>
Out of nowhere, I seem to be getting a lot of ICMP drops as per below. Any
reason why I would be getting these out of nowhere? Since they are not rule
generated; how can I turn off the logging on them? A setting in global
properties I assume, or can I do it per enforcement module? NG AI on IPSO 3.7
build 23.
Number: 1159
Date: 22Aug2003
Time: 11:37:27
Product: SmartDefense
Interface: eth1c0
Origin: xxxxxxxxxxxxxxxxxxx
Type: Log
Action: Drop
Protocol: icmp
Source: xxxxxxxxxxxxxxxxxx
Destination: xxxxxxxxxxxxxxxxxxx
Attack Name: Large ping
Information: Packet data size: 75
Attack Info: Echo request too long
icmp-type: 8
icmp-code: 0
thx
Matt
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
