[Snort-users] normal vs. malicious icmp echo

Mario Guerendo m.guerendo at ...5068...
Wed May 5 20:28:00 EDT 2004


Hi everyone,

I just wanted to know if anybody had a snort rule available that would
differentiate a normal ICMP echo ping from a malicious one?

If so, would you be willing to share it?

Thx a lot!!

M.





More information about the Snort-users mailing list