Cisco error message in log

April 29, 2009 at 16:28:05
Specs: Windows XP
We have a remote site connected to us through a VPN connection.

I have noticed the following message pop up in the log just starting recently:

2009-04-22 23:00:29 Local4.Warning %PIX-4-400014: IDS:2004 ICMP echo request from to on interface outside

The is the remote site network, it attempts to connect to multiple IP addresses on our side (servers and workstations). These are appearing quite frequently and are filling the log. No major changes have been made yet these messages are a relatively new occurrence. Does anyone have any suggestions on what I can do to figure out what this is and why it is happening? Searching for the specific cisco message %PIX-4-400014 just provides me with some generic descriptions of the event and says it "could" be normal or "could" be an attempted intrusion. Thanks!

See More: Cisco error message in log

Report •

April 29, 2009 at 17:50:25
If you're only seeing ICMP in the log, it's not a connection request. Ping is an example of an ICMP. You can run Wireshark on That will record all the packets.

How do you know when a politician is lying? His mouth is moving.

Report •
Related Solutions

Ask Question