[Snort-users] ICMP Destination ... (Port Unreachable) Help
erek at ...950...
Tue Jan 28 14:30:05 EST 2003
On Tue, 28 Jan 2003, Brian Blake wrote:
> In the past two day's I have had a machine generating over 5k hits a day.
> The traffic shows up via snort as ICMP Destination Unreachable (Port
> Unreachable). The machine in question has sent this same traffic two about
> 10 different address, but both on the same day. I have talked with two
> other people who know networking and TCP/IP and they are just as stumped.
> The system is running upto date with McAfee Virusscan 4.51 sp1. Below you
> will find the info extracted from snort. I researched port 137 scans on
> Sans Website with no real help.
Google is your friend:
"When things get weird, the weird turn pro." H.S. Thompson
More information about the Snort-users