Some worms, such as Sasser, use ICMP echo request packets with null payload to detect potentially vulnerable hosts.
You can configure how null payload ping packets should be handled.
Null Payload Fields
In this field… |
Do this… |
|---|---|
Action |
Specify what action to take when null payload ping packets are detected, by selecting one of the following:
|
Track |
Specify whether to log null payload ping packets, by selecting one of the following:
|