Previous Topic

Next Topic

Book Contents

Book Index

Null Payload

Some worms, such as Sasser, use ICMP echo request packets with null payload to detect potentially vulnerable hosts.

You can configure how null payload ping packets should be handled.

Null Payload Fields

In this field…

Do this…

Action

Specify what action to take when null payload ping packets are detected, by selecting one of the following:

  • Block. Block the packets. This is the default.
  • None. No action.

Track

Specify whether to log null payload ping packets, by selecting one of the following:

  • Log. Log the packets. This is the default.
  • None. Do not log the packets.

See Also

IP and ICMP

Packet Sanity

Max Ping Size

IP Fragments

Network Quota

Welchia

Cisco IOS DOS

Checksum Verification