[Snort-users] (snort_decoder) WARNING: IP dgm len < IP Hdr len!

snort user snort.user at ...11827...
Mon Sep 19 10:15:44 EDT 2005


a malformed ip packet
while decoding the packet, it is found that the ip header length is greater 
than ip datagram length
(based on the ip header values)


On 9/19/05, Ron Jenkins <rjenkins at ...12829...> wrote:
> 
>  Does any have information on the below alert:
> 
>  *(snort_decoder) WARNING: IP dgm len < IP Hdr len!*
> 
>  Thanks…
> 
>  Ron Jenkins (SnortCP, MCNE, CNE6, MCP, CCNA, CCEA)
> Senior Architect
> Data Integrity, LLC
> "We Integrate People with Solutions"
> 1724 Dallas Drive
> Suite 11
> Baton Rouge, La 70806
> Office. 225.927.8030
> Fax. 225.927.8033
> Cell225.931.1632
> 
> Email. rjenkins at ...12829...
> Web. http://www.dibr.net
> 
> (Aanval Reseller and Technology Partner)
> 
> http://www.aanval.com/tour/dibr
> 
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20050919/514a7868/attachment.html>


More information about the Snort-users mailing list