cpp – WindowsTechs.com

TCP connections in proxy logs in splunk [closed]

Posted on March 22, 2023 by cpp

I see a lot of TCP connections in proxy logs in Splunk e.g. tcp://Google.com. I don’t understand if this is user activity or some file reaching out or some website connecting to Google.
For example: Twitter is blocked in our environment. H… Continue reading TCP connections in proxy logs in splunk [closed]→

I am seeing ICMP type 3 error message from my firewall logs. However , I am unable to find the original request sent to that external IP [closed]

Posted on August 16, 2020 by cpp

No matching connection for ICMP error message: icmp src inside: X.X.X.98 dst outside: X.X.X.11 (type 3, code 2) on inside interface. Original IP payload: udp src X.X.X.11/53 dst X.X.X.98/52906.
Can somebody please help me understand the ca… Continue reading I am seeing ICMP type 3 error message from my firewall logs. However , I am unable to find the original request sent to that external IP [closed]→