[Snort-users] ICMP type/code for 'pass,log' options

Brian Caswell bmc at ...312...
Mon Mar 12 19:46:42 EST 2001


Lance Spitzner wrote:
> Is there any way I can convert the following
> statement from
> 
> pass icmp 192.168.1.5/32 any > 192.168.1.10/32 any
> 
> to
> 
> pass icmp 192.168.1.5/32 type3/code3 > 192.168.1.10/32 any

pass icmp 192.168.1.5/32 any -> 192.168.1.10/32 any (itype:3; icode:3;)

-- 
Brian Caswell
The MITRE Corporation




More information about the Snort-users mailing list