[Snort-users] icmp L3 Retriever Ping

Chris Green cmg at ...671...
Thu Feb 7 08:05:07 EST 2002

"JC Rodz" <nyjcr at ...125...> writes:

> Hi,
> Does anyone know what does Signature "ICMP L3retriever Ping" means.
> It looks like a regular ping, I'm not user whay is coming up. I
> received 336 instances within a 4 hour period.
> all from the same source and the same destination.

gives one possible explaination

Chris Green <cmg at ...671...>
Laugh and the world laughs with you, snore and you sleep alone.

More information about the Snort-users mailing list