![]() ![]() Signature 2151 (large ICMP) will drop packets hit the PIX off interface or those who pass through the PIX outside interface when you ping with large packet size (+ 993 bytes):įrom your post, you must have had the following policy of IDS on your PIX: Which is likely happened here is that you have ID political attack linked to your external interface with the action 'drop' or 'reset' all packages that match the signature in the category of the attack. The MTU size on all interfaces is always the default value of 1500. I also see that attached to the devices in the DMZ are taken excessively long time. Packets: Sent = 4, received = 0, lost = 4 (100% loss), Minimum = 1ms, Maximum = 1ms, average = 1ms Time approximate round trip in milli-seconds: ![]() Packets: Sent = 4, received = 4, lost = 0 (0% loss), ![]() I can ping with l - 992, but fail with-l 993. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |