RE: Sniffer Question

From: Hansang Bae (hbae@xxxxxxxxxx)
Date: Sat Nov 10 2001 - 12:05:24 GMT-3


   
At 09:21 AM 11/7/01 -0600, Wright, Jeremy wrote:
>thanks, but I know this user is not running any type of personal firewall.
>I'm tracking the source and destination of the ICMP unreachables now. It
>seems to be a couple of servers as the source and the user is the
>destination everytime.

And this is a response to an ICMP ECHO (ping) packet? Or is the user
trying to do a WINS query to a non-WINS server - thus getting the
port-unreachable message?

Or are you saying that the user cannot ping anyone?

Are there any ACLs in the mix?

hsb



This archive was generated by hypermail 2.1.4 : Fri Jun 21 2002 - 06:45:12 GMT-3