AxW

thx

Started yesterday. I found a post from April that was closed saying it was as ESET problem. I don't seem to be blocking. Can't find anything in the logs. Please advise.

@itman I pared it down to a single home and virtual network. I am no longer getting alerts. I do not recall configuring the additional network entries so I am wondering if perhaps they got duped when i upgraded to w10 from 8? or perhaps the original vendor? or perhaps some program added them? those are my best guess. I bet you have better ones ) Thanks very much for your assistance in this matter!!!!!!!!!!!!!!!!!!!!!!!!!!!!

@itman

Looks like . . no profile.

1.1 is the verizon router 1.2 is my computer I do not have a problem with the flood alerts per say. I am trying to do a root cause analysis but lack the tools for it in this environment.

Spent an hour with verizon. They can not help me. They did confirm that the STB shares the same IP as the router. ESET says there is an ICMP flood attack. It is in the log files BUT there is no detail. I have no idea as to how to proceed. The router does not keep low level logs and ESET does not tell me anything beyond warning will robinson. How do I identify the culprit/source? Edit-LOG: Time;Event;Source;Target;Protocol;Rule/worm name;Application;User 6/7/2017 9:52:26 AM;Detected ICMP Flooding attack;192.168.1.1;192.168.1.2;ICMP;;;

I have reviewed the verizon router logs. nothing stands out. granted they do not provide much detailed depth. According to the ESET logs the source is local 192.168.1.100 which happens to be the mysterious IP-STB1. Unmasking that and it is the verizon set top box. So the STB is trying to communicate with 192.168.1.2 which is this computer. ESET does not like it. Not sure why STB would even do that. I find this perplexing. Is it possible that something malicious has landed on the STB or this is normal behavior?

I too am having this issue since I upgraded the ESET software (Marcos I PM'd you about it). There does not seem to be any actionable details associated with this warning. What tools are available to interrogate my LAN. The ESET check network function reports back nothing being out of sorts.