[Snort-users] ICMP Packets.

Vinay A. Mahadik VAMahadik at ...6245...
Tue Aug 27 12:49:02 EDT 2002

"larosa, vjay" wrote:
> This traffic is ICMP Echo Request, and an ICMP Echo Reply. It appears the
> ICMP payload is identical in both packets. If this was really an image being
> transferred does anybody know
> if it is possible to reconstruct it? Thanks!
> vjl

Incidentally, that is what I was doing.. I see a 'Microsoft' image after
reconstructing it!

If you need the file (binary jpeg), I could send it to you off the list
(not sure if binary attachments are allowed here).


Vinay A. Mahadik
Summer Intern
Computer Protection Program
Lawrence Berkeley National Laboratory
(510) 495 2618

More information about the Snort-users mailing list