[Snort-users] ICMP: Destination Unreachable
tsevy at ...1701...
Thu Apr 5 11:01:11 EDT 2001
I don't wish to stop the logging of this message, but rather would like to
find out why I am seeing this:
Apr 4 23:59:45 snort: ICMP Destination Unreachable: 111.222.333.444
(nt2118wk) -> 184.108.40.206(NT401PRD)
Yet I can go to nt2118wk and ping NT401PRD and it will work.
Any thoughts on what could be causing this kind of false positive? Or a way
to determine what exactly on my network is giving the message back to
nt2118wk about destination unreachable?
More information about the Snort-users