Re: ICMP on port 3

["Srecko Jovancevic" <xxx-x () amadeus uni-bk ac yu>]

maybe a ddos daemon like TFN or trinoo
the communicate with icmp ?
did you scan your machine for them ?
--
Srecko Jovancevic, Information system manager
BK University Computing Centre
Belgrade, YU
---------------------------------------------
Phone:+381 11 60 40 22 ext +232
Cell.:+381 63 84 99 367
Use Linux! http://www.slackware.org


----- Original Message -----
From: "Tony Meman" <none () superig com br>
To: <emmanuel.siegel () ota fr socgen com>; <security-basics () securityfocus com>
Sent: Friday, December 06, 2002 10:30 PM
Subject: Re: ICMP on port 3


> ICMP doesnt use ports, what made you think it was port 3? Maybe you
confused
> with ICMP Type or Code. Can you check that?
>
> Regards,
>
> --
> none
>
> emmanuel.siegel () ota fr socgen com wrote:
>
> > Hi
> >
> > i have a strange communication between two of my Linux server, it's ICMP
> > packet on port 3.
> > Do you know what it could be ?
> >
> > Thks
> >
> > Emmanuel