[Snort-users] MISC Large ICMP Packet alert on small ICMP packet

Mark Cooper mark at ...5388...
Mon Mar 25 13:41:16 EST 2002


Bill,

This is nowhere near as creative as John Sage's answer but, IIRC, v1.8.3 had
a bug in the calculation of the packet size, or similar. Which version are
you running?

For info on the bug, posted 18/12/2001:
http://sourceforge.net/tracker/index.php?func=detail&aid=494701&group_id=335
7&atid=103357

Regards,

Mark Cooper





More information about the Snort-users mailing list