[cisco-voip] FW: Critical::cmny1.dsmo.com:CSAgent:Kernel Rule

[Wes Sisk]

10.64.11.1 is sending questionable ICMP messages to CM.  This isn't 
necessarily harmful, but it's certainly not the most efficient.  It 
could be harmful if it's redirecting traffic to an alternate flow for 
unexpected intercept, capture, inspection, or spoofing.  A packet 
capture will show exactly what and why.  from CLI on CM 5.x or 6.x:

utils network capture ....

/Wes

Miller, Steve wrote:
> Does anyone have any idea how to get rid of this error?  Have you seen
> anything similar? 
>
>
> Steve Miller
> Telecom Engineer
> Dickstein Shapiro LLP
> 1825 Eye Street NW | Washington, DC 20006
> Tel (202) 420-3370| Fax (202) 330-5607
> MillerS at dicksteinshapiro.com 
>
>
> -----Original Message-----
> From: OVEventLogMonitor at datalineconsult.com
> [mailto:OVEventLogMonitor at datalineconsult.com] 
> Sent: Tuesday, July 08, 2008 4:18 PM
> To: HPVoIP
> Subject: Critical::cmny1.dsmo.com:CSAgent:Kernel Rule 
>
> Critical::cmny1.dsmo.com:CSAgent:Kernel Rule  
>  EventID: 0x00000100 (256) - A packet with ICMP configuration was
> detected. Reason: ICMP configuration code. ICMP: 10.64.11.1->10.64.11.10
> type redirect/01. The operation was denied.  
>  Time Received Tuesday, July 08, 2008 4:17:46 PM 
>  Policy DS_WINOSSPI-OS_FwdApplicationError(1.24)
>
> --------------------------------------------------------
> This e-mail message and any attached files are confidential
> and are intended solely for the use of the addressee(s) 
> named above. This communication may contain material 
> protected by attorney-client, work product, or other 
> privileges. If you are not the intended recipient or person 
> responsible for delivering this confidential communication 
> to the intended recipient, you have received this 
> communication in error, and any review, use, dissemination, 
> forwarding, printing, copying, or other distribution of 
> this e-mail message and any attached files is strictly 
> prohibited. Dickstein Shapiro reserves the right to monitor 
> any communication that is created, received, or sent on its 
> network.  If you have received this confidential 
> communication in error, please notify the sender 
> immediately by reply e-mail message and permanently delete 
> the original message. 
>
> To reply to our email administrator directly, send an email 
> to postmaster at dicksteinshapiro.com
>
> Dickstein Shapiro LLP
> http://www.DicksteinShapiro.com
>
> ==============================================================================
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>