From: Wright, Jeremy (JA_WRIGHT@xxxxxxxxxxxx)
Date: Wed Nov 07 2001 - 12:21:04 GMT-3
thanks, but I know this user is not running any type of personal firewall.
I'm tracking the source and destination of the ICMP unreachables now. It
seems to be a couple of servers as the source and the user is the
destination everytime.
-----Original Message-----
From: Sean Reilly [mailto:seanreilly@nc.rr.com]
Sent: Wednesday, November 07, 2001 9:14 AM
To: Wright, Jeremy; ccielab@groupstudy.com
Cc: cisco@groupstudy.com
Subject: RE: Sniffer Question
Its possible the user may have a personal firewall or ids installed on their
system such as BlackIce. It may be set to deny ICMP request and response.
I'm involved in a security project where I run into this all the time.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Wright, Jeremy
Sent: Wednesday, November 07, 2001 9:38 AM
To: 'ccielab@groupstudy.com'
Cc: 'cisco@groupstudy.com'
Subject: Sniffer Question
I am tracing on a specific user and in the expert (station layer) I am
getting a bunch of ICMP port unreachables. The user is using email, the web,
and connecting to network drives but no pinging. Anybody have any experience
with this same problem? Thanks
This archive was generated by hypermail 2.1.4 : Fri Jun 21 2002 - 06:45:06 GMT-3