I have ASA 5540.
i got ICMP request continuos on Inside network to firewall port.
i want to know is there any attack or some ping from that server to firewall port.
6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302020: Built inbound ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
6|May 19 2009 15:54:37|302021: Teardown ICMP connection for faddr X.X.X.X/0 gaddr Y.Y.Y.Y/0 laddr Y.Y.Y.Y/0
this i got continues on my firewall logs. And tell me is there any link for logs understand so i understand this thing.
