How to determine the initiator of an icmp request?

Z

zRabbit2015-11-23 05:55:00

System administration

zRabbit, 2015-11-23 05:55:00

Colleagues, tell me how to determine the initiator of an icmp request or another network layer protocol, wireshark shows packets, processhacker network connections, but icmp echo comes from SYSTEM, there is a need to find out what process is scanning the company's subnet ???

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

A

athacker, 2015-11-23
@athacker

The TDSS rootkit behaved in a similar way: sysadmins.ru/post12865581.html#12865581