[Snort-users] icmp subnet mask request

Pinaud Bruno bpinaud at ...12...
Wed Jul 19 03:08:24 EDT 2000


ah, not very surprising !
i think it is another windows' joke !
----- Original Message -----
From: "Martin Roesch" <roesch at ...1...>
To: "Pinaud Bruno" <bpinaud at ...12...>
Cc: <snort-users at lists.sourceforge.net>
Sent: Wednesday, July 19, 2000 9:42 AM
Subject: Re: [Snort-users] icmp subnet mask request


> Doesn't sound particularly normal to me....
>
>     -Marty
>
> > Pinaud Bruno wrote:
> >
> > Hi,
> >
> > I've got a lots of ICMP subnet mask request (IDS216) on my network.
snort is
> > still running on a test network and there is only 4-5 nt boxes and 1 or
2
> >  linux boxes. all the computers are on a network switch to communicate
with
> > servers and the rest of the network.
> > i don't understand because the source ip is 0.0.0.0 and the dest ip is
> > 255.255.255.255 (a broadcast,  i think it is normal) ?
> > Is it normal ?
> >
> > Cheers PINAUD Bruno
>
> --
> Martin Roesch                      <roesch at ...2...>
> Core R&D                         http://www.hiverworld.com
> Hiverworld, Inc.       Continuous Adaptive Risk Management

 
______________________________________________________________________________
message envoye depuis http://www.ifrance.com
emails (pop)-sites persos (espace illimite)-agenda-favoris (bookmarks)-forums 
Ecoutez ce message par tel ! : 08 92 68 92 15 (france uniquement)






More information about the Snort-users mailing list