[Snort-users] ICMP: Destination Unreachable

Tom Sevy tsevy at ...1701...
Thu Apr 5 11:01:11 EDT 2001


I don't wish to stop the logging of this message, but rather would like to
find out why I am seeing this:

Apr  4 23:59:45 snort[3164]: ICMP Destination Unreachable: 111.222.333.444
(nt2118wk)  -> 55.66.77.88(NT401PRD) 

Yet I can go to nt2118wk and ping NT401PRD and it will work.

Any thoughts on what could be causing this kind of false positive?  Or a way
to determine what exactly on my network is giving the message back to
nt2118wk about destination unreachable?




More information about the Snort-users mailing list