Re: ICMP type 12 packets

[Thomas Springer <tuev () serveraudit net>]

At 11:18 21.06.2002 -0700, you wrote:
> I am seeing ICMP type 12 packets being returned to my network from various 

same here - > 2.500 packets starting 5/23, snort talking about 6 sources
and 29 (partially inactive) destinations:

source                                         # of packts        Dest. Ips
24.220.1.46     gw-mit.midco.net                   13                1     
172.22.2.1      Unable to resolve address          589               9     
172.22.8.2      Unable to resolve address          1162              10     
194.177.40.242  xl0.kapoue.europeonline.net        141               3     
207.71.212.246  core0.3xt.org                      1                 1
209.134.172.25  ip-209-134-172-25.iss.net          560               5     

iss.net ?? 172.22.* 

wondering,

ts

Thomas Springer


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com