[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] strange portscanning...



> Date: Wed, 17 Sep 2003 19:22:42 +0200
> From: seb


> Log Entry:  eth0:portscan: 3/3/icmp 192.168.4.3 -> 192.168.3.1 90 (22)
>
> strange, because: 192.168.4.3 is my raq550 and 192.168.3.1 is
> the gateway. and there are no other processes running.

Strange?  Not really.  ICMP code 3 + type 3 means "UDP port
unreachable", which is perfectly normal.  I'd guess you receive
that log message while performing a traceroute.


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 785 865 5885 Lawrence and [inter]national
Phone: +1 316 794 8922 Wichita
_________________________________________________________________
          DO NOT send mail to the following addresses :
  blacklist@xxxxxxxxx -or- alfra@xxxxxxxx -or- curbjmp@xxxxxxxx
Sending mail to spambait addresses is a great way to get blocked.