[Snort-users] ICMP Ping NMAP

larosa, vjay larosa_vjay at ...3331...
Wed Jul 17 09:48:03 EDT 2002


Hello,

Does anybody know of tools other than Nmap that will set off the ICMP Ping
NMAP signature? I am seeing lots 
of these events, the odd thing though is the TTL values are starting at
around 7 and decrementing for each subsequent 
packet. I am going to play with nmap to see if this is consistent. I thought
I would throw this out there to see if anybody
else has come across this one. Thanks!

vjl




More information about the Snort-users mailing list