[Snort-sigs] alert icmp $EXTERNAL_NET any -> $HOME_NET any (msg:"ICMP PING"; icode:0; itype:8; classtype:misc-ac

Jon Banks jjbanks at ...2072...
Thu Mar 3 13:41:29 EST 2005


 alert icmp $EXTERNAL_NET any -> $HOME_NET any (msg:"ICMP PING";
icode:0; itype:8; classtype:misc-activity; sid:384; rev:5;) 
 
This rule will false positive as a Novell Net Service Route Request!
 
Jon J. Banks, LAN Engineer
IT Department
Cobb & Douglas Public Health
1650 County Services Parkway
Marietta, Georgia 30008
Phone: (770) 514-2326 Fax: (770) 514-2313
jjbanks at ...2072...
www.cobbanddouglaspublichealth.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20050303/21d867b3/attachment.html>


More information about the Snort-sigs mailing list