Oh yeah!! thanks
Is this normal?
This a tcpdump output on LAN interface, pinging from other host of the
LAN to this interface.
00:16:22.877965 IP (tos 0x0, ttl 64, id 27505, offset 0, flags [DF],
proto ICMP (1), length 84, bad cksum 0 (->babc)!) 10.10.0.99 >
10.10.0.5: ICMP echo reply, id 50985, seq 2988, length 64
00:16:22.878111 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
ICMP (1), length 84) 10.10.0.5 > 10.10.0.99: ICMP echo request, id
50985, seq 2989, length 64
00:16:22.878119 IP (tos 0x0, ttl 64, id 62585, offset 0, flags [DF],
proto ICMP (1), length 84, bad cksum 0 (->31b4)!) 10.10.0.99 >
10.10.0.5: ICMP echo reply, id 50985, seq 2989, length 64
00:16:22.878268 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto
ICMP (1), length 84) 10.10.0.5 > 10.10.0.99: ICMP echo request, id
50985, seq 2990, length 64
bad cksum... and in tcp conections to...
Is this alarmant? 90 % packets bad cksum...
Bill Marquette wrote:
On Thu, Mar 19, 2009 at 6:09 PM, Mikel Jimenez Fernandez
<mi...@irontec.com> wrote:
mm OK
I think that I understna sysctl value what mean..
backup:~# ping -f 10.10.0.98 -c 500
PING 10.10.0.98 (10.10.0.98) 56(84) bytes of data.
.
--- 10.10.0.98 ping statistics ---
500 packets transmitted, 499 received, 0% packet loss, time 160ms
rtt min/avg/max/mdev = 0.269/0.296/3.321/0.140 ms, ipg/ewma 0.322/0.282 ms
backup:~# ping -f 10.10.0.98 -c 600
PING 10.10.0.98 (10.10.0.98) 56(84) bytes of data.
.....................................................................................................
--- 10.10.0.98 ping statistics ---
600 packets transmitted, 499 received, 16% packet loss, time 1391ms
rtt min/avg/max/mdev = 0.227/0.302/2.523/0.104 ms, ipg/ewma 2.323/0.288 ms
What exactly mean icmp limit value?
It means that the firewall will start dropping ICMP from a host that's
spamming the crap out of it like you are.
--Bill
---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com
Commercial support available - https://portal.pfsense.org
---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com
Commercial support available - https://portal.pfsense.org
