Ping of Death. Anyone else seen FW warnings on this?

[John Mahowald]

On 2/24/06, jludwig <wralphie at comcast.net> wrote:
> My firewall has been hit with the POD over 100 times (on port 6346).
> The issue would be almost laughable except the question of if this is being
> used to locate some other vulnerability in IPX, UDP,  or any other transport
> mechanism?
>
> Has anyone else been hit, and does anyone know of any reason why anyone would
> use this "archaic" DOS?

Port 6346 appears to be gnutella, so you're probably seeing agressive
P2P traffic.  http://isc.sans.org/port_details.php?port=6346

John