[Snort-users] ICMP PING speedera

Chris Green cmg at ...671...
Thu Oct 18 09:08:14 EDT 2001


"Bruno Gimenes Pereti" <pereti at ...3411...> writes:

> What does "ICMP PING speedera" do? 

http://www.speedera.com/nonflash_index.html - they try and find the
quickest path to a client for web site.  It's basically a proximity
sweep.

> I have a lot of them and never woried about because they don't look
> harmfull. 

agreed.

> But yesterday my bind started dieing every hour and snort got just
> this alert and "WEB-MISC http directory traversal"

I would look at DNS requests and bind logs.  What bind version are you
using?

-- 
Chris Green <cmg at ...671...>
A watched process never cores.




More information about the Snort-users mailing list