[Snort-users] ICMP PING CyberKit 2.2 rule falsing on "PingPlotter"

James R. Hendrick hendrick at ...1997...
Tue Aug 26 12:47:37 EDT 2003

	I thought someone was really zeroing in on my home system, but it was just me...

Seems that the default payload for PingPlotter (www.pingplotter.com) is all "AAAAAAA"s

Fortunately, you can change it.

Just thought I'd pass this along. Sometimes I run it from work to monitor systems, etc. 


Jim Hendrick

More information about the Snort-users mailing list