[Snort-users] Percent ICMP traffic

Vivek Rajagopalan vivek at ...15649...
Mon Sep 23 11:17:23 EDT 2013


That is definitely off the scales.  Anything more than 1-2% needs a second
look.

How are you measuring the traffic split ?

Thanks,
Vivek

-----------
Vivek Rajagopal
trisul.org




On Tue, Sep 17, 2013 at 2:34 AM, David Knutson <
dknutson at ...16542...> wrote:

> Just started using Snort.  What would be considered a normal traffic split
> between TCP and ICMP?  I'm current running with traffic at TCP (15%) and
> ICMP (84%)
>
>
> ------------------------------------------------------------------------------
> LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
> 1,500+ hours of tutorials including VisualStudio 2012, Windows 8,
> SharePoint
> 2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack
> includes
> Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13.
> http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130923/ea2402ae/attachment.html>


More information about the Snort-users mailing list