[Snort-users] Alerts

David Young korang at ...11827...
Tue Jan 25 21:36:01 EST 2005


I have Snort running on a Fedora Core 3 server.  I see alot of ICMP
Destination Unreachable Communication with Destination Host is
Administratively Prohibited    alerts.  The problem is it appears that
my server is the source IP.  Is my server running rouge pings?  Or is
it as I suspect that someone has scanned or pingged(sp) my server but
is unable to respond?  Thanks in advance.

David Young




More information about the Snort-users mailing list