[Snort-users] ICMP from many hosts.
vision at ...4...
Thu Oct 12 20:24:37 EDT 2000
At 03:02 PM 10/12/2000 -0400, Robert Buckley wrote:
>Instead of spamming snort-users list Ill post the output from a
>The log will be there for 24 hours,
I sent a more detailed response earlier directly to Robert. Basically this
was just a plain traceroute, initiated from his computer, absolutely
He had been using several mislabeled snort rules (not from arachNIDS) which
could definitely give a user the wrong idea about what traffic he is
seeing. Note that both "PING-ICMP Time Exceeded" and "PING-ICMP
Destination Unreachable" are not "pings".
More information about the Snort-users