Hello All,
I have gone through symantec server log, where ICMP 3 is made to internally hosted application IP from NetFlow Controller server.
Through system process, C:/Windows/system32/NTOSKRNL.EXE
I have googled about the NetFlow controller and found that it is the one collects the IP traffic from Router and switches.
So, i hope it would collect the traffic that is initiated to internally hosted application in network also.
But i have a doubt that, there should be a communication between router to server (NetFlow).
Not from Netflow controller to internally hosted application in network. Why it has to send ICMP to the internal application?. Bit confused. Please clarify. Thanks!
