Quantcast
Channel: Question and Answer » sniffer
Viewing all articles
Browse latest Browse all 19

localhost to localhost ICMP traffic that is suspicious.. any idea of what is creating this?

$
0
0

I keep seen this on my tcpdump output.. is prob something very simple and logical but I can’t see to see any process with lsof or netstat doing a ICMP request to it’s own 127.0.0.1 every 2-3 secs… anyone have any idea of what is creating this? thanks in advance..

tcpdump -i eth0 ! port 22  and ! port 2222 and proto ICMP
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
05:18:27.467081 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 369
05:18:27.467083 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 369
05:18:27.476988 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 369
05:18:27.476991 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 369
05:18:27.496957 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 369
05:18:27.496959 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 369
05:18:27.516949 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 369
05:18:27.516951 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 369
05:18:27.817068 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 374
05:18:27.817070 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 374
05:18:27.836987 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 374
05:18:27.836989 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 374
05:18:27.846966 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 374
05:18:27.846968 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 374
05:18:27.866970 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 374
05:18:27.866972 IP localhost.localdomain > localhost.localdomain: ICMP localhost.localdomain udp port 37064 unreachable, length 374

Viewing all articles
Browse latest Browse all 19

Latest Images

Trending Articles





Latest Images