[Snort-users] Snort 1.8.6 crashes after Ping of Death

McCammon, Keith Keith.McCammon at ...3497...
Thu Jul 11 06:36:05 EDT 2002


I believe that's a pcap failure, correct?  Anyone?

> -----Original Message-----
> From: Night-Stalker [mailto:theeaglesociety at ...2792...]
> Sent: Thursday, July 11, 2002 9:08 AM
> To: snort-users at lists.sourceforge.net
> Subject: [Snort-users] Snort 1.8.6 crashes after Ping of Death
> 
> 
> My Snort (version 1.8.6) (under Linux Mandrake 8.2) crashes 
> after one or two attacks with the DoS-Attack "Ping of Death", 
> produced with the "IDS Informer" from BLADE Software. This 
> Software is an IDS testing tool. Does anybody else have this problem?
> SYSLOG-ENTRY:
> <date> <time> <hostname> kernel: device eth0 left promiscuous mode
> <date> <time> <hostname> kernel: Oversized IP packet from <attacker>
> 
> 
> Thanks for your answers
> 
> Addy
> 
> 
> __________________________________________________________________
> Your favorite stores, helpful shopping tools and great gift 
> ideas. Experience the convenience of buying online with 
> Shop at ...2793...! http://shopnow.netscape.com/
> 
> Get your own FREE, personal Netscape Mail account today at 
http://webmail.netscape.com/



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
PC Mods, Computing goodies, cases & more
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list