[Snort-users] Newbie "what does this mean" question

Ian Hunter ihunter at ...384...
Fri Oct 18 11:58:02 EDT 2002


I'm running snort-1.8.4-3 on SuSE 8.0, and I'm getting TONS of messages that
look like:

Oct 18 14:38:19 lucy snort: [1:485:2] ICMP Destination Unreachable
(Communication Administratively Prohibited) [Classification: Misc activity]
[Priority: 3]: {ICMP} 130.59.33.17 -> 192.168.1.20

The FAQ says ignore it unless there are lots, and if there are lots, figure
out where they're coming from. ???

What causes this?

Thanks!





More information about the Snort-users mailing list