[Snort-users] (snort_decoder) Unknown Datagram decoding problem!

pingouin osmolateur pingouin_osmolateur at ...1855...
Mon Jul 21 02:59:06 EDT 2003


Hii everybody
I ve a lot of the following alert :

[**] [116:108:1] (snort_decoder) Unknown Datagram decoding problem! [**]
07/21-10:38:43.760054 192.168.3.2 -> x.x.x.x
ICMP TTL:128 TOS:0x0 ID:39603 IpLen:20 DgmLen:29
Type:3  Code:3  DESTINATION UNREACHABLE: PORT UNREACHABLE
ORIGINAL DATAGRAM TRUNCATED

I ve seen in a previous message that if i use config disable_decode_alerts
i ll never obtain this alerts but what the effect of this option.
It won't decode the next DESTINATION UNREACHABLE: PORT UNREACHABLE alert ?
thanks
AC





More information about the Snort-users mailing list