[Snort-users] how to further diagnose 'ICMP Destination Unreachable' problem?

Chris W. Parker cparker at ...13453...
Tue Aug 30 08:56:23 EDT 2005


Briggs, Bruce <mailto:Bruce.Briggs at ...13183...>
    on Tuesday, August 30, 2005 6:39 AM said:

> You can find out a little more about ICMP Destination Unreachable
> here: http://www.networksorcery.com/enp/protocol/icmp/msg3.htm

Thanks. I will get to reading.

> It could be caused by a number of things. For example there could be a
> firewall (or router with ACLs) which is preventing a packet from being
> received/forwarded and if the firewall had an option enabled to notify
> the sender of this blocked port packet, then an ICMP type 3 code 3
> packet would be sent out to the initiating IP addr from the firewall.

Unfortunately that's not the case but thanks for the info anyway.


Chris.




More information about the Snort-users mailing list