No subject


Thu Nov 23 16:34:03 EST 2017


host talking to Win2K domain controllers." --nnposter "

The L3retriever ping triggers on "ABCDEF...".  However, it seems that a
standard Win2k ping has a content of "abcdef..." rather than "ABCDEF...".
Maybe Win2k uses a different ICMP content when contacting DCs.

--
^Drew

http://guh.nu

--Begin PGP Fingerprint--
3C6C F712 0A52 BD33 C518  5798 9014 CA99 2DA0 5E78
--End PGP Fingerprint--





More information about the Snort-sigs mailing list