Mysterious pings

Hello all,

Quick question.. I have just noticed that one of my routers (Cisco 3620) have been pinging lots of remote hosts. About 400 an hour or so. The originating IP address is the address assigned to the S0 port which is a customer T1 that is activated but the CPE is not yet installed. Our network monitoring tools (IPaudit) has shown this activity. My question is why? Why would a port that should have no activity be pinging (seemingly) random IP addresses that are not even on my atonymous system. This has happened before on the Ethernet port of the same router but I didn't think much of it since I just thought that someone might have been doing some traceroutes.

Any insight would be appreciated. If you need more information please just let me know.

Thank you in advance.

Richard Marriner
Network Administrator
Sutter Yuba Internet Exchange

http://www.syix.com

 

[stevensavage]

Are you using CDP?
What routing protocol is setup if any?

steve

 

[BuckWeet]

well, if the source IP is your router, you could get in and do a "sh line" or "show user" to see if someone is on the box doing tasks they shouldn't be doing..


BuckWeet