[Snort-users] what are these?

Ryan Russell ryan at ...35...
Fri Oct 6 17:23:38 EDT 2000


Tracert on Windows machines uses ICMP for it's traceroute implementation.

				Ryan

On Tue, 3 Oct 2000, Max Vision wrote:

> I'm not sure why you are seeing these traceroute packets (TTL=1), but I
> should clarify that ICMP does not support the concept of "ports" except in
> the payload of "port unreachable" packets.
> 




More information about the Snort-users mailing list