Code: p388 Severity: Warning
Description: This event is generated when ICMP traffic is sent between Tribe Flood Network 2000 (TFN2K) hosts. Impact: Attempted DDoS. It is possible there is a TFN2K host in your network. Corrective: Perform proper forensic analysis on the suspected compromised host to discover the means of compromise. Rebuild a confirmed compromised host. Use a packet-filtering firewall to block inappropriate traffic to the network to prevent hosts from being compromised.
|
