[Snort-users] large icmp

jess at ...521... jess at ...521...
Tue Nov 21 11:57:39 EST 2000


	Hi, Christophe.

	Not long ago, I just asked a similar question regarding the LARGE
ICMP PACKET alerts. You can check the responses in the Archives:

	http://www.geocrawler.com/redir-sf.php3?list=/snort-users/

	Search for "Large ICMP packet".

	Basically, it looks like this is part of the MTU Path discovery 
on AIX and HP-UX. I don't know if I understood you well, but do the LARGE
ICMP pkt alerts come from the power mac g4?

								JESS












More information about the Snort-users mailing list