[Snort-users] Strange ping activity

Anthony Buser ABuser at ...2078...
Tue May 22 11:37:59 EDT 2001

Yes, I've noticed a lot of ping zeros... in my case we've gotten 106 in
the past 2 days from 26 hosts.  Been getting a large amount of pings
overall (IDS169/ping-windows2000 and IDS152/Ping BSDtype as well).  So
much so that I've went ahead and blocked all pings on the firewall.  Yet
the pings havn't slowed down yet.

Tony Buser
Unconundrum, Inc. http://www.unconundrum.com

-----Original Message-----
From: Bob [mailto:bob at ...848...]
Sent: Tuesday, May 22, 2001 10:50 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Strange ping activity

Has anyone else noticed a pile of IDS171/ping zero alerts in the past 
couple days? I'm up to over 400 alerts in the past 3 days from roughly 5

IPs and 2 seperate netblocks all belonging to Level 3 Communications.

Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list