ICMP: Echo Request Resent

This protocol anomaly triggers when it detects an ICMP echo request retransmission (for example, with the same ID and sequence numbers). Because ICMP is unreliable, echo request retransmissions are rare and can indicate data tunneling over ICMP if accompanied by other ICMP exploit activity.

Short Name
ICMP:AUDIT:REQUEST-RESND
Severity
Info
Recommended
False
Recommended Action
None
Category
ICMP
Keywords
ICMP
Release Date
08/27/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?