Ping and ICMP

Just taking a quick tour of the logs to note these:

From 66.135.207.137 - 3 packets to icmp(3)
From 66.135.207.138 - 2 packets to icmp(3)
From 66.135.223.137 - 1 packet to icmp(3)

What is interesting is the IP owner - and I'll leave that to the clever
folk here to suss out.

Consider why ICMP may be useful to such organisations. Any thoughts? :-)

"Rusty Lady" <(E-Mail Removed)> wrote in message news:i7padv$ub0$(E-Mail Removed)...
> Just taking a quick tour of the logs to note these:
>
> From 66.135.207.137 - 3 packets to icmp(3)
> From 66.135.207.138 - 2 packets to icmp(3)
> From 66.135.223.137 - 1 packet to icmp(3)
>
> What is interesting is the IP owner - and I'll leave that to the clever
> folk here to suss out.
>
> Consider why ICMP may be useful to such organisations. Any thoughts? :-)

Pass.
Why woud Ebay have any more need to ping you than the countless others that
no doubt do the same every day.

--
Graham.

%Profound_observation%

"Graham." <(E-Mail Removed)> wrote in message news:i7q3dk$2r2$(E-Mail Removed)...
>
>
> "Rusty Lady" <(E-Mail Removed)> wrote in message news:i7padv$ub0$(E-Mail Removed)...
>> Just taking a quick tour of the logs to note these:
>>
>> From 66.135.207.137 - 3 packets to icmp(3)
>> From 66.135.207.138 - 2 packets to icmp(3)
>> From 66.135.223.137 - 1 packet to icmp(3)
>>
>> What is interesting is the IP owner - and I'll leave that to the clever
>> folk here to suss out.
>>
>> Consider why ICMP may be useful to such organisations. Any thoughts? :-)
>
> Pass.
> Why woud Ebay have any more need to ping you than the countless others that
> no doubt do the same every day.

And if it's shill bidding detection how do the pings relate chronologically to your bids?
They would know your IP at the time of your bid

--
Graham.

%Profound_observation%

Meanwhile, at the uk.telecom.broadband Job Justification Hearings, Graham.
chose the tried and tested strategy of:

> "Rusty Lady" <(E-Mail Removed)> wrote in message
> news:i7padv$ub0$(E-Mail Removed)...

>> From 66.135.207.137 - 3 packets to icmp(3)

>> Consider why ICMP may be useful to such organisations. Any thoughts? :-)

> Why woud Ebay have any more need to ping you than the countless others
> that no doubt do the same every day.

Don't recognise those logs so could be wrong about this, but it might not
necessarily be ICMP echo ("ping" to its friends) being logged; the OP could
have been trying to access a host on eBay's network that wasn't available,
which could result in an ICMP destination host unreachable message. Perusal
of

http://en.wikipedia.org/wiki/ICMP_De...on_Unreachable

suggests it is that, because destination unreachable is Type 3, and the
logged messages are icmp(3).

--
<http://ale.cx/> (AIM:troffasky) ((E-Mail Removed))
18:47:32 up 4 days, 1:07, 7 users, load average: 0.00, 0.00, 0.04
Qua illic est accuso, illic est a vindicatum

On Mon, 27 Sep 2010 18:57:43 +0100, alexd scribe:

> Meanwhile, at the uk.telecom.broadband Job Justification Hearings,
> Graham. chose the tried and tested strategy of:
>
>> "Rusty Lady" <(E-Mail Removed)> wrote in message
>> news:i7padv$ub0$(E-Mail Removed)...
>
>>> From 66.135.207.137 - 3 packets to icmp(3)
>
>>> Consider why ICMP may be useful to such organisations. Any thoughts?
>>> :-)
>
>> Why woud Ebay have any more need to ping you than the countless others
>> that no doubt do the same every day.
>
> Don't recognise those logs so could be wrong about this, but it might
> not necessarily be ICMP echo ("ping" to its friends) being logged; the
> OP could have been trying to access a host on eBay's network that wasn't
> available, which could result in an ICMP destination host unreachable
> message. Perusal of
>
> http://en.wikipedia.org/wiki/ICMP_De...on_Unreachable
>
> suggests it is that, because destination unreachable is Type 3, and the
> logged messages are icmp(3).

Exactly :-) Just another reason *not* to block ICMP.