Signature Detail
Short Name |
ICMP:AUDIT:RESPONSE-RESND |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
ICMP |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
ICMP: Echo Reply Resent
This protocol anomaly triggers when it detects an ICMP echo reply retransmission (for example, with the same ID and sequence numbers). Because ICMP is unreliable, echo request retransmissions are rare and can indicate data tunneling over ICMP if accompanied by other ICMP exploit activity.
Extended Description
None
References