Recent content by SysEng

I agree that it is malicious and action needs to be taken. I used Hijackthis to locate any malicious activity on one machine and was able to remove several worms and malware. The other machines I can't locate at the moment because the DHCP address was released from the machines and renewed...

The ICMP Sweep threshold maximum is set to 128 ICMP packets per second Port Scan threshold maximum is set to 512 Syn/sec

And now that I think about it, the user did have IPOD software installed. That could caused the ICMP sweep right?

Malware I found several spyware/malware applications on one of the machines that I removed. I suspect that one of them was the cause of the ICMP Sweeping. It was a ICMP broadcast that trigged NIDS. I'm not sure what you mean by what constitutes ICMP sweeping and Port Scanning. Fortinet...

I've just recently installed Fortinet(appliance) on my networks perimeter. The box is used as for anti-virus filtering and NIDS. Since I've installed the appliance I've been able to successfully quarantine several viruses. I'm even able to track down the boxes that the viruses are coming...