[Snort-users] Newbie "what does this mean" question

Alberto Gonzalez ag-snort at ...7149...
Fri Oct 18 12:11:13 EDT 2002

first, IMHO you should upgrade your snort distribution. (eg 1.9.0 
actually its pretty sel explanatory what this is, ICMP _destination 
unreachable_. Alot of things could cause this.
I usally get these messages from my ISP's router.

Ian Hunter wrote:

>I'm running snort-1.8.4-3 on SuSE 8.0, and I'm getting TONS of messages that
>look like:
>Oct 18 14:38:19 lucy snort: [1:485:2] ICMP Destination Unreachable
>(Communication Administratively Prohibited) [Classification: Misc activity]
>[Priority: 3]: {ICMP} ->
>The FAQ says ignore it unless there are lots, and if there are lots, figure
>out where they're coming from. ???
>What causes this?

The secret to success is to start from scratch and keep on scratching.

More information about the Snort-users mailing list