[Snort-sigs] Traceroute test

Blake blake at ...363...
Tue Jun 17 10:29:10 EDT 2003


> Then this rule is not enough. one can use TCP and ICMP and any other
IP 
> protocol for tracerouting as well. Things to watch for are very low
TTL 

One such tool, for anyone that cares to tinker, is tcptraceroute.  It's
very handy.

http://michael.toren.net/code/tcptraceroute/

-blake





More information about the Snort-sigs mailing list