inaccurate NSDB desc for GIS 2001 # ICMP Host Unreachable

GIS # 2001 fires when there are ICMP type 3 sachets. This type of message is more correctly described as inaccessible Destination (refer to IANA).

Triggers of signature on all type 3 messages, but to be precise in the description of the NSDB, it should trigger only on Type 3 Code 1 (refer to IANA).

Can Cisco please make corrections of the NSDB for S94, or correct the signature to only shoot ICMP Type 3 Code 1. I can adjust the setting of code through IDM, but it gets reset after the deployment of config IDS MC. Very annoying (see my previous post) to correctly set up sigs by IDM having to do again after MC IDS push.

http://www.IANA.org/assignments/ICMP-parameters

A fix has been implemented with S94. CSCee64472 following the issue. The NSDB has been updated to reflect the addition of the 1 ICMP code.

Tags: Cisco Security

Similar Questions

  • Replacement for the preview handler host has stopped working

    When creating a shortcut which connect to the network share. It can connect to get the file and it will have the following error message:

    Replacement for the preview handler host has stopped working

    Signature of the problem:
    Problem event name: APPCRASH
    Application name: prevhost.exe
    Application version: 6.1.7600.16385
    Application timestamp: 4a5bc5ca
    Fault Module name: hooknt.dll
    Fault Module Version: 1.52.0.0
    Timestamp of Module error: 49a 20833
    Exception code: c0000005
    Exception offset: 0000b 951
    OS version: 6.1.7600.2.0.0.256.48
    Locale ID: 3081
    Additional information 1: 0a9e
    More information 2: 0a9e372d3b4ad19135b953a78882e789
    Additional information 3: 0a9e
    Additional information 4: 0a9e372d3b4ad19135b953a78882e789

    Does anyone know how to avoid it?

    Hi Ivan 2008,

    You can try the network drive mapping & check if it helps.

    Create a shortcut to (map) a network drive

    Hope the helps of information. Please post back and we do know.

    Concerning
    Joel S
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Default time for IDM to block hosts

    In ID 4.0, what is the default time for IDM to block hosts (in the access list for a router)? And this time is configurable?

    Sensor CLI:

    end of config

    Service configuration-sensor-virtual virtualSensor

    Melody

    shunEvent

    ShunTime (minutes block guests)

    Of IDM:

    Click on Configuration

    Click on block

    Click blocking properties

    Update the blocking time input control.

    Note: This was recently added to the IDM, so you may need

    upgrade to the latest version of the IDS software.

  • Why can't I configure the POP/IMAP mails for my Muse site in Business Catalyst? I don't have the option "use this service for e-mail as hosting the Web site" under Advanced options

    Why can't I configure the POP/IMAP mails for my Muse site in Business Catalyst? I don't have the option "use this service for e-mail as hosting the Web site" under Advanced options.

    Is this due to my hosting Plan? Appreciate the answers.

    Your site is a CCM that is located on a WebBasics plan (this plan does not e-mail hosted on Business Catalyst).

    If you want to create the email addresses on this site, you will need to configure your mail elsewhere server and configure the MX records on your site to point to the external mail server.

    If you want to use the hosted Business catalyst e-mail services, you should use a WebBasics + or superior siteplan. To upgrade your free CCM site, access administration area of your site-> Site Management-> upgrade now-> choose the desired site plan and billing frequency-> Add personal and credit card details-> Submit.

    Please see this article on setting up email on your site of BC accounts: http://docs.businesscatalyst.com/user-manual#! / settings/mail electronic-users of the site -

    For the establishment of the records point to the external mail server, see http://docs.businesscatalyst.com/user-manual#! / settings/email-users/creation-boxes of reception-for-your-users of the site

    Kind regards

    Laurant

  • Need to publish for a 3rd party host of Muse.

    I tried to post my Muse site for a 3rd party host with no luck. It seems that the 2 options that I have met so far that I can use Adobe accommodation or export to HTML format and then download via Dreamweaver (which no longer works). Does anyone know how to get around this problem so that I can use outside the accommodation?

    Thank you!!

    Hello

    The message indicates that you are trying to use the webforms in Muse widget and it seems that your host does not support PHP or PHP mail service.

    Please see the document: http://forums.adobe.com/docs/DOC-3581 and contact your hosting provider in this regard.

    Kind regards
    Sachin

  • ICMP Port Unreachable

    If someone can clarify that the exception java.net.PortUnreachableException: ICMP Port Unreachable shows (outside of what is obvious)? Here's the scenario: using UDP I a client application, a portal application and a server application. The client sends to the server through the gateway and vice versa. I created 2 Sockets, a conflict between the client and the gateway and the other between the gateway and the server. When I try to send from the bridge to the client package never makes it to the client (server-side is fine). When I call sock.getLocalSocketAddress and sock.getRemoteSocketAddress are all two 0.0.0.0 (the latter has at least the right port number). The gateway acts as a server for the customer and as a client to the server. I tried to solve this problem using sock.connect on the side of the gateway for the client in the face of the plug, but it has ultimately generates inaccessible except for ICMP port on the side of the door of entry upon receipt by the customer.

    Thank you in advance.

    This means that there is no UDP connectivity between whatever the host gets the exception and regardless of the host this socket is connected to. Usually a firewall issue.

    The address 0.0.0.0 means only that the socket is bound to all interfaces, this isn't a problem.

  • E.M.P. 11.1.2.2 configurator - host unreachable

    Hi John,.

    I have read the below article posted by you and I get the same error "the next guests are inaccessible." given that the environment is protected firewall. I would like to get confirmed if I can't ignore this warning or should I activate the ICMP protocol to avoid any problems.

    http://John-Goodwin.blogspot.com/2013/01/EPM-11122-Configurator-host-unreachable.html

    Yes, you can ignore the warning, if you cannot connect to the shared services database then that is a different matter but everything connects and then the warning is not a problem.

    See you soon

    John
    http://John-Goodwin.blogspot.com/

  • ORA-12543: TNS:destination host unreachable

    Dear all,

    I installed the database and the client on OEL 6.3 different from the box. When connecting through client database, I am getting error, following

    Machine 2 (client a) (Hostname - test.otm63app) (IP - 192.168.56.3).

    [oracle@test ~] $ sqlplus "sysdba@otm63db."
    SQL * more: Production release 11.2.0.1.0 Sun Apr 28 01:38:37 2013
    Copyright (c) 1982, 2009, Oracle. All rights reserved.

    Enter the password:
    ERROR:
    ORA-12543: TNS:destination host unreachable

    Enter the user name: sysdba
    Enter the password:
    ERROR:
    ORA-12162: TNS service name: net is incorrectly specified

    Enter the user name: sysdba
    Enter the password:
    ERROR:
    ORA-12162: TNS service name: net is incorrectly specified


    SP2-0157: unable to connect to ORACLE after 3 attempts, coming out of SQL More *.

    Below is the output of tnsping.

    [oracle@test ~] $ tnsping otm63db
    AMT Ping utility for Linux: Version 11.2.0.1.0 - Production on April 28, 2013 01:41:13
    Copyright (c) 1997, 2009, Oracle. All rights reserved.
    Use settings files:
    /Data/app/Oracle/product/11.2.0/Client_1/network/admin/SQLNET.ora

    TNSNAMES adapter used to resolve the alias
    Try to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)(HOST = test.otm63db) (PORT = 1521))) (CONNECT_DATA = (SERVICE_NAME = otm63db)))
    AMT-12543: TNS:destination host unreachable

    Below is the text of,.

    *[Oracle@test admin] $ cat sqlnet.ora*
    sqlnet.ora # Network Configuration file: /data/app/oracle/product/11.2.0/client_1/network/admin/sqlnet.ora
    # Generated by Oracle configuration tools.

    NAMES. DIRECTORY_PATH = (TNSNAMES, EZCONNECT)

    ADR_BASE = / data/app/oracle

    *[Oracle@test admin] $ cat tnsnames.ora*
    otm63db =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = TCP)(HOST = test.otm63db) (PORT = 1521))
    )
    (CONNECT_DATA =
    (SERVICE_NAME = otm63db)
    )
    )

    Below is,

    [oracle@test ~] $ cat/etc/hosts
    192.168.56.3 test.otm63app
    192.168.56.2 test.otm63db

    Below is the ping to DB,.

    [oracle@test ~] $ ping test.otm63db
    PING test.otm63db (192.168.56.2) 56 (84) bytes of data.
    64 bytes from test.otm63db (192.168.56.2): icmp_seq = 1 ttl = 64 time = 0,824 ms
    64 bytes from test.otm63db (192.168.56.2): icmp_seq = 2 ttl = 64 time = 1.34 ms
    64 bytes from test.otm63db (192.168.56.2): icmp_seq = 3 ttl = 64 time = 0,626 ms
    64 bytes from test.otm63db (192.168.56.2): icmp_seq = 4 ttl = 64 time = 1.50 ms
    64 bytes from test.otm63db (192.168.56.2): icmp_seq = 5 ttl = 64 time = 2.14 ms
    64 bytes from test.otm63db (192.168.56.2): icmp_seq = 6 ttl = 64 time = 0,672 ms
    -test.otm63db ping statistics-
    6 packets transmitted, 6 received, 0% packet loss, time 5220ms
    RTT min/avg/max/leg = 0.626/1.184/2.144/0.541 ms

    Machine 1 (a database) (Hostname - test.otm63db) (IP - 192.168.56.2).

    [*[Oracle@test ~] $ cat/etc/hosts *.
    192.168.56.2 test.otm63db
    127.0.0.1 localhost
    192.168.56.3 test.otm63app

    [*[Oracle@test ~] $ cat /data/app/oracle/product/11.2.0/dbhome_1/network/admin/listener.ora*
    listener.ora # Network Configuration file: /data/app/oracle/product/11.2.0/dbhome_1/network/admin/listener.ora
    # Generated by Oracle configuration tools.

    ADR_BASE_OTM63DB = / data/app/oracle

    OTM63DB =
    (DESCRIPTION_LIST =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = test.otm63db) (PORT = 1521))
    )
    )

    [*[Oracle@test ~] $ cat /data/app/oracle/product/11.2.0/dbhome_1/network/admin/tnsnames.ora*
    tnsnames.ora # Network Configuration file: /data/app/oracle/product/11.2.0/dbhome_1/network/admin/tnsnames.ora
    # Generated by Oracle configuration tools.

    OTM63DB =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = test.otm63db) (PORT = 1521))
    (CONNECT_DATA =
    (SERVER = DEDICATED)
    (SERVICE_NAME = otm63db)
    )
    )

    Please help me to solve this error.

    Thank you

    user12167361 wrote:
    Dear all,

    I installed the database and the client on OEL 6.3 different from the box. When connecting through client database, I am getting error, following

    Machine 2 (client a) (Hostname - test.otm63app) (IP - 192.168.56.3).

    [oracle@test ~] $ sqlplus "sysdba@otm63db."
    SQL * more: Production release 11.2.0.1.0 Sun Apr 28 01:38:37 2013
    Copyright (c) 1982, 2009, Oracle. All rights reserved.

    V11.2.0.1 is NOT certified on OEL 6.3; only V11.2.0.3 is certified.

    Enter the password:
    ERROR:
    ORA-12543: TNS:destination host unreachable

    See below

    >

    Enter the user name: sysdba
    Enter the password:
    ERROR:
    ORA-12162: TNS service name: net is incorrectly specified

    Enter the user name: sysdba
    Enter the password:
    ERROR:
    ORA-12162: TNS service name: net is incorrectly specified

    SP2-0157: unable to connect to ORACLE after 3 attempts, coming out of SQL More *.

    Below is the output of tnsping.

    [oracle@test ~] $ tnsping otm63db
    AMT Ping utility for Linux: Version 11.2.0.1.0 - Production on April 28, 2013 01:41:13
    Copyright (c) 1997, 2009, Oracle. All rights reserved.
    Use settings files:
    /Data/app/Oracle/product/11.2.0/Client_1/network/admin/SQLNET.ora

    TNSNAMES adapter used to resolve the alias
    Try to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)(HOST = test.otm63db) (PORT = 1521))) (CONNECT_DATA = (SERVICE_NAME = otm63db)))
    AMT-12543: TNS:destination host unreachable

    I suspect that Firewall (iptables) blocking the packets between the client and DB Server

  • 12543 AMT Destination Host Unreachable

    Hello

    I'm accessing Oracle DB on Linux (it is installed in a VM) get the following error.

    Error: 12543 TNS Destination Host Unreachable

    If anyone can help?

    I would like to access Oracle DB and take a full backup of this one...
    Any help is appreciated...


    Thank you.
    Jitendra

    The error clearly indicates that the problem is with connectivity to the server,

    Make sure that the network driver is working and that the network is in place.

    See also,

    Re: ORA-12543: TNS:destination host unreachable

  • XP laptop, it appears, for win 32 generic host process services has encounterered a problem.

    Need driver for sm bus controller. The computer is a top of the Tower, bridge, MP6954. Thank you, Bob.

    Hi Bob,
     
    -Did you of recent changes made to your computer before this problem?
    -When exactly you receive this error message? It is at the start of the computer or at the launch of a particular application?
     
    Here is an article that talks about this problem. Follow the steps in the article to resolve the problem:
     
    Here is a link to download the drivers from Gateway technical support:
  • Help for BBM blackBerry Smartphones & Facebook does not not for 9320 - problem with "host Routing Table? -Virgin

    So, today I received my new 9320 at Virgin Mobile, first Blackberry & love the phone! but I can't use the BBM or Facebook app...

    At first I could not even access the browser while that connected to my wifi... then I phoned Virgin & they helped me to reset the settings on my BB that I could use the browser etc...

    I thought it was problem solved, until I discovered BBM and Facebook, use app world separate service? Anyway, I phoned up to Virgin because I wanted to do this job, they are included in my package & I did not understand why I can't access any of them...

    After a long phone call the problem has proved that the "host routing table" was empty and (according to in Virgin) there is a problem with new BlackBerry receiving these details... they said this isn't a problem on the end there & told me there is nothing more they can do so to click 'register now' and wait for the details...

    24 hours later and nothing, so I hope someone here can help me, make me a BB the whole point is things miss me actually lol and I feel now I'm paying for a phone contract I can't really use it, without any help from my provider?

    Any help?

    Or

    Anyone with a new BB knows something like that recently? Thank you

    Wow... Virgin you gave really there. You see, you PAY for 100% of your services and 100% of your formal support... at the moment, they seem to be or you deliver. Only they have the ability (in fact the RESPONSIBILITY!) to degenerate RIM requiring improved support of cases (from your description, it must be that... with a HRT empty, nothing that anyone here can do). End users have no free path to receive assistance from the RIM at all - only via the escalation. So, what I would do if I were you, is their ring back... but this time do not let you fob OFF... insist that, because you HAVE them, you have a contract with them and they are about to be in violation of this contract - they must solve your problem, degenerate into RIM if they wish.

    Good luck!

  • Remove data for a downgraded ESXi host syslog collector?

    Hello

    We already put out of service an ESXi 5 host in the cluster.

    However, network Syslog Collector, the host still appears with the hostname / IP address and the size of the log (about 18 MB).

    We would like to seek your advice on how to remove this entry to ESXi host Syslog collector Page.  Should I restart the service "VMware vSphere Syslog Collector" on vCenter Server?

    Thank you

    Post edited by: TonyJK

    If the server esxi already downgraded in judgment of sate, then you can delete the syslog file (in vcenter) to as esxi. If the underwater ESXI still running, you can disable forewall port for syslog (even if you can remove the host name of the syslog setting advanced collector.)

  • Support for the older ESX host matrix

    We have an old server vCenter used to support our ESX 3.5 hosts. The server running VirtualCenter 2.5.0 Build 227637. While we are in the middle of the decommissioning of the environment, we recently received ownership of several former ESX 3.0.1 hosts. I can't find any documentation to show that VirtualCenter 2.5.0 taken in charge. I'll be able to add these hosts in our VirtualCenter? Thank you.

    Hello

    It's here... for more details, see attachment:

    Kind regards

    P.

  • How to reset the criteria for access to FTP: host?  (Host says that I should work?)

    User input lines and the password to get surrounded by areas of the red line. Think that there is a corruption of info stored REF.

    The podcast for GAIANistas Marv Lyons [email protected]

    Thank you.

    Solved with the host.

    Marv

  • Update VSAN task configuration failed for ALL 3 ESXI hosts

    I enabled VSANS on the cluster, but the task of updating VSAN configuration failed with the below error

    Operation failed, the diagnostic report: not associate the host to the cluster VSAN (Exec command "/etc/init.d/vsanvpd restart" succeeded, but came back with zero State: 1).

    On all esxi hosts 3, I can see a warning

    Host is in an active VSAN cluster but doesn't have a Service of active VSAN

    Please help me fix this isseu... I need all the VSAN here experts... I do not find a troubleshooting for this issue.

    This information was supposed to do in the VSAN Release Notes, although I must admit that I don't check that they exist.

    Here's a post I made on the memory requirements which came into force for GA

    Part 14 & #8211 VSAN. Memory of the host requirements. CormacHogan.com

Maybe you are looking for

  • I have a G4 and the transfer of data to an I mac?

    I have a G4 and the transfer of data to an I mac? There is no port Firewire on the Imac A1418

  • What is - this and how to fix it? incorrect text data fromyog33.games.ac4

    When I log in to yahoo games room, right after java say loading page a message just to say data incorrect text of yog33.games.ac4.yahoo.com/98.136.139.9 can someone please help thx

  • I lost my keyproduct

    I can 't find nerostartsmart.

  • SSH failure for ASA 8.2 (3)

    I have a pair of 5520 s 8.2 (3) running in active failover mode / standby, routed. I have a problem with SSH as it stops worked shortly after, less than 8 hours during the current network, telnet works fine as is https/AMPS. I've recreated the encryp

  • Anconnect Cisco ASA VPN deployment

    Hello I have a request for information about the deployment for the ASA who must support more than 10000 clients. I understand that several ASA would be necessary for her however I was wondering what can be typical design for this? The ASA multiple i