[Snort-users] New ICMP attack?

Mitch Thompson mitchthompson at ...539...
Mon Jan 8 07:20:35 EST 2001


Hello,

Was hoping someone could give me some more information about the
following:

[**] PING-ICMP Source Quench [**]
10/03-09:21:30.000070 xxx.xxx.xxx.xx -> xxx.xxx.xxx.xxx
ICMP TTL:232 TOS:0x0 ID:53130 IpLen:20 DgmLen:56 DF
SOURCE QUENCH


Just saw a bunch of these roll off the screen...Can't find any reference
to SOURCE QUENCH on WhiteHats.com, but probably didn't look hard enough.

Thanks in advance.

--
Mitch Thompson, San Antonio TX

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCC d- s: a C++ UL++++ P+ L+++ E--- W+ N+ o-- K w-- 
O- M-- V PS-- PE++ Y+ PGP+ t+ 5 X- R- tv b+ DI++ D-- 
G e+ h---- r+++ y++++ 
------END GEEK CODE BLOCK------




More information about the Snort-users mailing list