What is this? Should I be worried?
-
I looked at logs this morning and noticed hundreds of these all coming form 1 ip address something with icmp?
I dont understand, is this something to worry about, is it normal?
-
Someone from Limelight Networks in Tempe, AZ is trying to ping you.
Watch out, those people from Arizona can be pretty unfriendly.
(I keed, I keed, fine citizens of AZ. Don't shoot me, I'm here legally) -
So is this what a ping attach looks like? or a denial of service attack?
50+ times a second and over multiple days i've seen this
-
I'd just add a rule on the WAN to drop everything from that IP and move it to be one of the first rules.
-
just because its icmp does not mean its a echo request, I would snag a few of those packets and take a better look to what it is.
I don't think you can grab icmp from the webui capture interface, so just go to the console and use tcpdump directly.
-
the firewall IS taking care of it right? and just letting me know via the log?
-
Yeah, it's getting blocked.
A quick check with the all-knowing Google indicates that the traffic may be related to something called 'valve/steam'. It is some sort of mechanism those young steampunk kids use to play those online games. Try banning those under forty from your network and see if the traffic disappears. -
Yeah, it's getting blocked.
A quick check with the all-knowing Google indicates that the traffic may be related to something called 'valve/steam'. It is some sort of mechanism those young steampunk kids use to play those online games. Try banning those under forty from your network and see if the traffic disappears.Hey now. I'm over forty and still play games ;)
