[Snort-users] IDS 171 /Ping Zero's

shawn . moyer shawn at ...1184...
Wed Jan 31 14:22:51 EST 2001


Jason Boyer wrote:
> 
> I keeping getting thousands of these alerts daily to the same machine
> from the same dozen or so IP's. Anyone else seen similar things or have
> any other ideas?
> 
> Cheers,
> Jason

Napster? I was seeing this one when machines were logged into Napster
and being pinged during someone's Napster search. Since I drop any
inbound ICMP at the firewall anyway, I went ahead and disabled the rule.


--shawn

-- 
s h a w n   m o y e r
shawn at ...1184...




More information about the Snort-users mailing list