[Snort-users] ICMP dest. unreacheable...

Stepanishev Roman Petrovich roman at ...6783...
Wed Sep 4 09:17:17 EDT 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all!

I am a newbie user of Snort :)
I install snort to my servers under FreeBSD 4.x and since i get many message 
in alert log as following:

[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively 
Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
09/02/02-07:56:02.242876 0:7:50:54:9E:41 -> 0:E0:18:1E:EF:9D type:0x800 
len:0x46
195.68.190.10 -> 81.16.143.44 ICMP TTL:244 TOS:0x60 ID:48270 IpLen:20 
DgmLen:56
Type:3  Code:13  DESTINATION UNREACHABLE: PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
81.16.143.44:1358 -> 213.221.5.201:6666 TCP TTL:55 TOS:0x0 ID:33236 IpLen:20 
DgmLen:44
Seq: 0xB003BEB9
** END OF DUMP

81.16.143.44 - is my IP.

What happenes?


- -- 
best regards, Stepanishev Roman Petrovich. [ PTP-RIPN ]
[roman at ...6783...] [2:5006.9/23] [ICQ 35756399] [http://petrovich.pp.ru]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE9dVzTAQXRyK61a9QRAoUYAJ4sOFMWd01lJPBr8Bc7HjKxG+UePwCbBlUR
cuj6b3IloftWfxIra1kBNYA=
=8unC
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list