[Snort-users] WARNING: Not IPv4 datagram!

Jeremia d. jdb at ...8995...
Wed Apr 23 18:25:08 EDT 2003


I have noticed in my logs recently alot of alerts with
 [snort] (snort_decoder) WARNING: Not IPv4 datagram!

I have since blocked the ip doing this with iptable's. Now I get the same 
alerts but the destination is not my ip. Just the first 2 ocets match my ip.
Any idea why this is behaving like this?

Thanks ahead.

-- 
Painting, n.:
	The art of protecting flat surfaces from the weather, and
exposing them to the critic.
		-- Ambrose Bierce





More information about the Snort-users mailing list