[Snort-users] L3Retriever Pings?

Robinson, Eric R. erobinson at ...5206...
Mon Mar 18 16:54:06 EST 2002

I've looked around and have not found a decent description of L3Retriever
pings or why they are anything to get worked up about. From looking at
icmp.rules, it looks like they are normal echo requests with
"ABCDEFGHIJKLMNOPQRSTUVWABCDEFGHI" in each packet. I fail to see why this is
anything to warrant alerts. Can somebody clear this up?


More information about the Snort-users mailing list