IT Employment

Ask something
Discussion Locked

ICMP jams the router

0 helpful
1 reply

by net designer

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I found that one of WinXP client machines was sending huge number of pings (ICMP) to IP addresses not on my network in sequential order. As a result, the router (gateway) would jam and stop working. We scanned his w/s for viruses but did not find anything. When he's not connected to network, no ICPM activity happens. What else can we check? Thanks.

1 reply

by ewai

You could turn on the internet connection firewall on the XP box, and only allow HTTP traffic through? It does sound like a virus or similar. A net monitor program could produce that effect, for example if you set Transcend Net Monitor to scan for severs in a list of addresess outside your network range it would produce this result, so perhaps one of them is installed locally, or even a hacking tool which port sweeps? Or in fact can't viruses piggy-back other machines to use to port-sweep? I think I read that somewhere, so perhaps the virus is resident on anothe machine?

This discussion is closed to new replies.