[Snort-users] Where is my ICMP ID and ICMP Seq with ICMP Timestamp, AddressMask, Info output?

Ofir Arkin ofir at ...949...
Thu May 17 02:34:21 EDT 2001


I was replacing old examples with Snort with new once, while I have
encountered a little problem :)

With ICMP Echo request and reply messages snort prints the ICMP ID and the
ICMP Sequence numbers.

But they ARE NOT printed with ICMP Timestamp, AddressMask, Information
Request.
All using ICMP ID and ICMP Sequence numnbers as part of its

Marty can you change that?


Ofir Arkin [ofir at ...949...]
Founder
The Sys-Security Group
http://www.sys-security.com
PGP CC2C BE53 12C6 C9F2 87B1 B8C6 0DFA CF2D D360 43FA





More information about the Snort-users mailing list