cancel
Showing results for 
Search instead for 
Did you mean: 

Dropped packets

N/A

Dropped packets

Hello,

I new to ADSL - I run XP with ICF

I've noticed that since installing ADSL, the number of 'dropped' packets
logged by ICF has gone up dramatically - 400 per day.

Now I know that much of this is probably caused by being online for
longer periods - but the curious thing is that 90% of these dropped
packets originate from PlusNet IP addresses.

Does anyone know what's going on? Are PlusNet users a particularly
curious lot? Should I notify PlusNet of the IP addresses of particularly
persistent sources?

Or what?
6 REPLIES
N/A

Dropped packets

There are a couple of threads which relate to this: hosts from plus.net and Pings from Plusnet explain why this is happening. Announcement: Action to reduce the Virus generated Data explains how PlusNet had hoped to address this.
N/A

Dropped packets

Thanks for replying.

The dropped packets are all on port 92 - this entry is typical :

30/10/2003 18:52:48 DROP ICMP 81.174.152.* 81.174.*.* 92

(I've obscured the IP addresses)

They seemed particularly heavy on the 30th - not too bad today.

I'm just curious really.
N/A

Dropped packets

I don't think ICMP protocol uses "ports" (TCP and UDP, yes, but not ICMP), so I think the 92 must mean something different is this case.
N/A

Dropped packets

ICMP packets have a 'type' rather than a port but 92 almost certainly isn't this. Defined ICMP types vary between 0 and 16 with 8 (echo), 0 (echo reply) and 3 (destination unreachable) being the most common.

I'd bet that 92 was actually the packet length in bytes. All my incoming virus related pings are 92 bytes long. There is no standard length for echo request packets as they can contain a arbitary length chunk of arbitary data.

Charles.
N/A

Dropped packets

It's all a bit strange anyway - the dropped packets seem to have dropped
off now Smiley - I'm just getting a few once in a while - and those now
predominantly from the 'usual suspects'.

Thanks for taking an interest.
N/A

Dropped packets

Oops - yes, I should have realised that the 92 referred to the length of a
pinging.

It's all quite interesting though.