[Snort-users] Which rule!

Jim Forster jforster at ...176...
Thu Mar 15 18:23:35 EST 2001


Andrew,
Check rule #23 in the current info.rules file. (from todays update)

----- Original Message -----
From: "Andrew Betson" <rew at ...1587...>
To: <snort-users at lists.sourceforge.net>
Sent: Thursday, March 15, 2001 4:14 PM
Subject: [Snort-users] Which rule!


> i get this logged a couple of times a minute from different ip addresses,
> im not sure which rule is causing it
>
> Mar 15 23:06:04 reaper snort: ICMP Echo Request (Undefined Code!):
> them.x.x.x -> me.x.x.x
> Mar 15 23:06:05 reaper snort: ICMP Echo Reply: me.x.x.x -> them.x.x.x
> but id really like to shut it off because its filling my /var/log/snort
> pretty quick!!!
>
>
> Andrew
> \\\\\/////
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users





More information about the Snort-users mailing list