GEN:SID 1:422
Message ICMP Mobile Registration Reply undefined code
Summary This event is generated when a network host generates an ICMP Mobile Registration Reply datagram with an undefined ICMP Code.
Impact ICMP Mobile Registration Reply were never implemented and have been replaced by UDP and TCP versions of the message.  ICMP Type 36 datagrams with an ICMP Code other than 0, should never be seen in normal network conditions.
Detailed Information ICMP Mobile Registration Reply datagrams were developed before the approval of RFC3344 (IP Mobility Support for IPv4).  Therefore these types of ICMP datagrams should never be seen in normal networking conditions.  
Affected Systems  
Attack Scenarios None known
Ease of Attack Numerous tools and scripts can generate this type of ICMP datagram.
Corrective Action ICMP Type 36 datagrams with undefined ICMP Codes are not normal network activity.  Hosts generating these types of datagrams should be investigated for nefarious activity
Additional References None