Re: Sniffer Question

From: Richard Foltz (ccie2b@xxxxxxxxxx)
Date: Wed Nov 07 2001 - 12:30:29 GMT-3


   
depends, look at the outgoing traffic and see what is going out that might
recieve the port unreachables back. could be a virus, like nimda trying to
attack addresses on port 80, but might not berunning web services, they
would then return a port unreachable.

Richard Foltz, CCIE#8339, CCNP-Voice, CCDP, MCSE+I, Network+, A+

----- Original Message -----
From: "Wright, Jeremy" <JA_WRIGHT@admworld.com>
To: <ccielab@groupstudy.com>
Cc: <cisco@groupstudy.com>
Sent: Wednesday, November 07, 2001 8:38 AM
Subject: Sniffer Question

> I am tracing on a specific user and in the expert (station layer) I am
> getting a bunch of ICMP port unreachables. The user is using email, the
web,
> and connecting to network drives but no pinging. Anybody have any
experience
> with this same problem? Thanks



This archive was generated by hypermail 2.1.4 : Fri Jun 21 2002 - 06:45:06 GMT-3