[Snort-users] Please Explain

Muscat, Tyrone J. MUSCATTJ at ...3501...
Thu Oct 18 12:23:30 EDT 2001


I am new to IDS...if any one could explain the following it would be
helpful....I seem to be seeing a lot of this traffic....

Let me know if this is correct:
207.140.21.40 trys to contact 130.3.10.234
12.125.46.105(Is this a router???) tells 207.140.21.40 that 130.3.10.234 is
unavailable

[**] [1:399:2] ICMP Destination Unreachable (Host Unreachable) [**]
10/17-10:51:06.754880 0:2:FD:1E:25:ED -> 0:1:2:63:67:73 type:0x800 len:0x46
12.125.46.105 -> 207.140.21.40 ICMP TTL:254 TOS:0x0 ID:38068 IpLen:20
DgmLen:56
Type:3  Code:1  DESTINATION UNREACHABLE: HOST UNREACHABLE
** ORIGINAL DATAGRAM DUMP:
207.140.21.40:137 -> 130.3.10.234:137 UDP TTL:126 TOS:0x0 ID:16995 IpLen:20
DgmLen:96
Len: 76
** END OF DUMP


Ty Muscat 
Watt Regulator 
815 Chestnut Street 
North Andover, MA 01845 
Phone: 978-689-6036 
Fax: 978-689-6115 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20011018/690b05ff/attachment.html>


More information about the Snort-users mailing list