Icmp port unreachable
cummins c20n6hc oil filter
When Event Collection Server (ECS) is down QRadar sends ICMP messages of port unreachable to the syslog sources. If there are enough log sources with a high rate, every event sent could trigger an ICMP port unreachable message for port 514 from the QRadar appliance. Note: This issue would apply to any QRadar appliance that runs the Event.