[j-nsp] ScreenOS question

Kevin Cullimore kcullimo at runbox.com
Fri Oct 24 19:08:29 EDT 2008


SunnyDay wrote:
> Hello a stupid question maybe.
>
> When i ping to a host i can see from the logging of the firewall this:
> 192.168.40.10:24064     192.168.100.11:512     192.168.40.10:24064 
> 192.168.100.11:512     ICMP
>
>
> my question is this i thing that icmp does not have a port,why do i 
> get a dst-port from this output?
> how does this work?
When a log entry associated with icmp echo traffic is created, that 
column is populated with the value of the identifier field.
> and second i tried to ping from a certain device  and in the logging 
> the dst-port was 0.
The values partially depend upon operating system of the initiating 
device and the number of concurrent echo requests.
> Is there a problem with that?
>
> Any help appreciated.
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>



More information about the juniper-nsp mailing list