[Snort-users] Win98 on reboot

Lance Spitzner lance at ...185...
Mon Mar 12 00:11:31 EST 2001


Rebooted Win98 desktop on my network, snort captured and
alerted to the following.  What is my Win98 desktop trying
to do? No packet payload in the ICMP packets :-0

[**] ICMP Router Selection [**]
03/11-22:51:40.761942 192.168.1.100 -> 224.0.0.2
ICMP TTL:128 TOS:0x0 ID:0 IpLen:20 DgmLen:28
Type:10  Code:0  UNKNOWN

[**] ICMP Router Selection [**]
03/11-22:51:43.769400 192.168.1.100 -> 224.0.0.2
ICMP TTL:128 TOS:0x0 ID:1792 IpLen:20 DgmLen:28
Type:10  Code:0  UNKNOWN

[**] ICMP Router Selection [**]
03/11-22:51:46.788874 192.168.1.100 -> 224.0.0.2
ICMP TTL:128 TOS:0x0 ID:3584 IpLen:20 DgmLen:28
Type:10  Code:0  UNKNOWN

-- 
Lance Spitzner
http://project.honeynet.org





More information about the Snort-users mailing list