Originally Posted by echox
i saw many traffic from many ip like below while using tcpdump
09:50:02.177663 126.96.36.199 > myhost: icmp: 188.8.131.52 udp port 1231 unreachable (DF)
09:50:02.179520 184.108.40.206 > myhost: icmp: 220.127.116.11 udp port 1231 unreachable (DF)
What is this traffic and how can i block it?
Thanks & best regards
It shows that your host send a UDP packet to 18.104.22.168 at port 1231. However, that port is not open at 22.214.171.124. So 126.96.36.199 sent back an ICMP message telling you that that port is unreachable.