ICMP request continues got..

Unanswered Question
May 19th, 2009

I have ASA 5540.

i got ICMP request continuos on Inside network to firewall port.

i want to know is there any attack or some ping from that server to firewall port.

6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0

this i got continues on my firewall logs. And tell me is there any link for logs understand so i understand this thing.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
handsy Tue, 05/19/2009 - 03:57

Is it not as simple as identifying the source of the pings and finding out why that bit of kit is pinging constantly? Then fix as necessary.

Actions

This Discussion