[Snort-users] ICMP Packets.

Vinay A. Mahadik VAMahadik at ...6245...
Tue Aug 27 12:49:02 EDT 2002


"larosa, vjay" wrote:
> 
> This traffic is ICMP Echo Request, and an ICMP Echo Reply. It appears the
> ICMP payload is identical in both packets. If this was really an image being
> transferred does anybody know
> if it is possible to reconstruct it? Thanks!
> 
> vjl
> 

Incidentally, that is what I was doing.. I see a 'Microsoft' image after
reconstructing it!

If you need the file (binary jpeg), I could send it to you off the list
(not sure if binary attachments are allowed here).

Thanks,
Vinay.

--
Vinay A. Mahadik
Summer Intern
Computer Protection Program
Lawrence Berkeley National Laboratory
(510) 495 2618




More information about the Snort-users mailing list