[Snort-users] icmp L3 Retriever Ping

Chris Green cmg at ...671...
Thu Feb 7 08:05:07 EST 2002


"JC Rodz" <nyjcr at ...125...> writes:

> Hi,
>
> Does anyone know what does Signature "ICMP L3retriever Ping" means.
> It looks like a regular ping, I'm not user whay is coming up. I
> received 336 instances within a 4 hour period.
> all from the same source and the same destination.
>

http://www.ultraviolet.org/mail-archives/snort-users.2001/0516.html
gives one possible explaination


-- 
Chris Green <cmg at ...671...>
Laugh and the world laughs with you, snore and you sleep alone.




More information about the Snort-users mailing list