[Snort-users] Newbie "what does this mean" question

Alberto Gonzalez ag-snort at ...7149...
Fri Oct 18 12:11:13 EDT 2002


first, IMHO you should upgrade your snort distribution. (eg 1.9.0 
http://www.snort.org/dl/snort-1.9.0.tar.gz)
actually its pretty sel explanatory what this is, ICMP _destination 
unreachable_. Alot of things could cause this.
I usally get these messages from my ISP's router.


Ian Hunter wrote:

>I'm running snort-1.8.4-3 on SuSE 8.0, and I'm getting TONS of messages that
>look like:
>
>Oct 18 14:38:19 lucy snort: [1:485:2] ICMP Destination Unreachable
>(Communication Administratively Prohibited) [Classification: Misc activity]
>[Priority: 3]: {ICMP} 130.59.33.17 -> 192.168.1.20
>
>The FAQ says ignore it unless there are lots, and if there are lots, figure
>out where they're coming from. ???
>
>What causes this?
>
>Thanks!
>
>
>  
>

-- 
The secret to success is to start from scratch and keep on scratching.






More information about the Snort-users mailing list