PDA

View Full Version : Help understanding log event


Fad
March 1st, 2009, 10:58 AM
Hello, it`s me again ! ::)

I just checked my LnS log earlier this morning and saw this:

-{ Quote: "03-01-09,11:06:04 D-0 'ICMP : All ICMP types (n' 78.144.0.229 ICMP Type:11 Code:0
---
03-01-09,11:12:35 D-149 'ICMP : All ICMP types (n' 78.144.1.0 F:ICMP Type:11 Code:0
" }-

As you can see there were nearly 150 attempts made from the same (or very similar) addresses in 6 minutes.

I understand that LnS is doing it`s job and blocking unwanted connections, but could someone explain why it might happen like this ?

I checked the addresses and they all came from the same place, which happens to be part of the same company as my ISP.

So I`m not particularly concerned that they came from there....but was wondering WHY they would try to connect so often in a short space of time.

Could they be somehow trying to check up on me, or find out about my connection...or even try to interrupt something ?

What could they be trying to do ? :-\

Phant0m
March 1st, 2009, 11:19 AM
Visit http://en.wikipedia.org/wiki/ICMP_Time_Exceeded

... You using a client application that making a lot of connections? like p2p software?



Regards,
Phant0m``

Fad
March 1st, 2009, 12:12 PM
Thanks for that link Phant0m, I think I now understand what that message is.

I do have that software installed (uTorrent) but certainly was not using it this morning when I got those logs....

all I did was turn on the computer and open ThunderBird & Firefox, nothing else.

The only other thing that connected at the time when I booted up was the antivirus trying to update itself.

That`s what made me wonder if it was some kind of "attack" :thumb:

Phant0m
March 1st, 2009, 12:20 PM
But is your IP dynamic? You probably was giving an IP that was just used by someone else... ;)

Fad
March 1st, 2009, 01:32 PM
Static IP address here :thumb:

Rui
March 2nd, 2009, 01:23 PM
Hey Fad

It's me again, too!
There is absolutely NO PROBLEM with that situation.
I also have a static IP and what you describe concerning Look'n'Stop logs is quite usual after running a P2P application. It only shows it's doing a fine job.
Relax!
Cheers.
Rui

Fad
March 2nd, 2009, 02:05 PM
Hi Rui...

thanks for the info, I`m glad to hear it`s not just me :thumb:

I only worried because I wasn`t actually doing anything at the time when they appeared.

I just check them every now & again to see what`s going on, but it`s been quite quiet in the logs recently.