search

spender-sandbox / cuckoo-modified

Modified edition of cuckoo
395 stars 178 forks source link

Unknown IP address try to ping my Winxp Analysis Machine #464

Open masifpak opened 7 years ago

masifpak commented 7 years ago

I have deployed Cuckoo setup on ESX server by creating a virtual switch with 192.168.124.0/24 network as shown below IP tables. Problem is when I see reports it shows me unknow ping requests by unknown IP addresses as show in figure. Moreover have a look on number of hosts. Every time my analysis crosses critical timeout range. Error: The analysis hit the critical timeout, terminating. I have checked it by giving 3600 as threshold time. What issue can be. image

Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- 192.168.124.0/24 anywhere ctstate NEW ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED Chain OUTPUT (policy ACCEPT) target prot opt source destination