[Snort-users] 13 instances of ping bsd

Todd Backman todd at ...859...
Tue Nov 28 01:43:09 EST 2000


I am curious if the 13 diff IP's were from unassigned IP space of major
bandwidth providers?

- Todd

On Tue, 28 Nov 2000, Mark Rowlands wrote:

> [**] IDS152 - PING BSD [**]
> 11/27-22:49:21.777738 0:80:C8:56:FB:5 -> 0:10:4B:B6:F1:7B type:0x800 len:0x62
> 203.197.173.129 -> 62.5.7.17 ICMP TTL:56 TOS:0x0 ID:55074 
> ID:23472   Seq:51862  ECHO
> 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17  ................
> 18 19 1A 1B 1C 1D 1E 1F 20 21 22 23 24 25 26 27  ........ !"#$%&'
> 28 29 2A 2B 2C 2D 2E 2F 30 31 32 33 34 35 36 37  ()*+,-./01234567
> 38 39 3A 3B 3C 3D 3E 3F                          89:;<=>?
> 
> =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
> 
> hi folks, got 13 of these within millisecs of each other all different IPs 
> but apparently same mac address...... none of the addresses have shown up 
> before or since. any thoughts?
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users
> 




More information about the Snort-users mailing list