Out of nowhere, I seem to be getting a lot of ICMP drops as per below. Any reason why
I would be getting these out of nowhere? Since they are not rule generated; how can I
turn off the logging on them? A setting in global properties I assume, or can I do it
per enforcement module? NG AI on IPSO 3.7 build 23.
Number: 1159
Date: 22Aug2003
Time: 11:37:27
Product: SmartDefense
Interface: eth1c0
Origin: xxxxxxxxxxxxxxxxxxx
Type: Log
Action: Drop
Protocol: icmp
Source: xxxxxxxxxxxxxxxxxx
Destination: xxxxxxxxxxxxxxxxxxx
Attack Name: Large ping
Information: Packet data size: 75
Attack Info: Echo request too long
icmp-type: 8
icmp-code: 0
thx
Matt
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================