Re: Can anyone identify this?

[Jerome Tytgat <j.tytgat () ision fr>]

I've seen the same problem on my Firewall using Ipchains.
But the dest IP are only DNS servers.

I don't understand WHY my linux box is sending
"Destination Unreachable" to these servers.

Someone can tell is this is a normal behaviour ??

_______________________________________________________________
> ISION FRANCE
Jérôme Tytgat
System and Network Administrator
mailto:j.tytgat () ision fr       http://www.ision.fr
_______________________________________________________________

> It looks like someone is pinging or using trace route.
>
> You left out what kind of box the destination is.  Web
> server, FTP server,
> DNS server, normal workstation.....it makes a difference.
> What else is
> inside the network?  Something worth getting to?
>
> Is there any pattern to the attempts to connect?   If you are
> hosting a web
> server and dropping pings at the Sonic Wall, that may be the problem.
> Someone or some program is attempting to see if the machine
> is alive before
> connection.
>
> It may be harmless, it may be an automated ping sweep.
>
> Jason
> http://www.jasonlewis.net