[Snort-users] MISC Large ICMP Packet

Frank Knobbe FKnobbe at ...649...
Thu Apr 5 14:09:23 EDT 2001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> -----Original Message-----
> From: Neil Dickey [mailto:neil at ...1633...]
> Sent: Thursday, April 05, 2001 12:48 PM
> 
> Sometimes they're not so benign, and can be used in DOS 
> attacks. [...]

Or in ICMP tunnels. Does anyone know what packets size loki and
similar ICMP tunnels use?

Frank

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.8
Comment: PGP or S/MIME encrypted email preferred.

iQA/AwUBOsy005ytSsEygtEFEQK+5wCgp2SF2iPNQn81HYiRjPbPzyTAKdIAoMBX
jd/JS5Dhmx/8eKSGR+A6Gwro
=gsPE
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list