No subject

Thu Nov 23 16:34:03 EST 2017

host talking to Win2K domain controllers." --nnposter "

The L3retriever ping triggers on "ABCDEF...".  However, it seems that a
standard Win2k ping has a content of "abcdef..." rather than "ABCDEF...".
Maybe Win2k uses a different ICMP content when contacting DCs.


--Begin PGP Fingerprint--
3C6C F712 0A52 BD33 C518  5798 9014 CA99 2DA0 5E78
--End PGP Fingerprint--

More information about the Snort-sigs mailing list