[Snort-users] what are these?

Ryan Russell ryan at ...35...
Fri Oct 6 17:23:38 EDT 2000

Tracert on Windows machines uses ICMP for it's traceroute implementation.


On Tue, 3 Oct 2000, Max Vision wrote:

> I'm not sure why you are seeing these traceroute packets (TTL=1), but I
> should clarify that ICMP does not support the concept of "ports" except in
> the payload of "port unreachable" packets.

More information about the Snort-users mailing list