[Snort-users] icmp subnet mask request
bpinaud at ...12...
Wed Jul 19 03:08:24 EDT 2000
ah, not very surprising !
i think it is another windows' joke !
----- Original Message -----
From: "Martin Roesch" <roesch at ...1...>
To: "Pinaud Bruno" <bpinaud at ...12...>
Cc: <snort-users at lists.sourceforge.net>
Sent: Wednesday, July 19, 2000 9:42 AM
Subject: Re: [Snort-users] icmp subnet mask request
> Doesn't sound particularly normal to me....
> > Pinaud Bruno wrote:
> > Hi,
> > I've got a lots of ICMP subnet mask request (IDS216) on my network.
> > still running on a test network and there is only 4-5 nt boxes and 1 or
> > linux boxes. all the computers are on a network switch to communicate
> > servers and the rest of the network.
> > i don't understand because the source ip is 0.0.0.0 and the dest ip is
> > 255.255.255.255 (a broadcast, i think it is normal) ?
> > Is it normal ?
> > Cheers PINAUD Bruno
> Martin Roesch <roesch at ...2...>
> Core R&D http://www.hiverworld.com
> Hiverworld, Inc. Continuous Adaptive Risk Management
message envoye depuis http://www.ifrance.com
emails (pop)-sites persos (espace illimite)-agenda-favoris (bookmarks)-forums
Ecoutez ce message par tel ! : 08 92 68 92 15 (france uniquement)
More information about the Snort-users