Thu Nov 23 16:36:19 EST 2017
traceroute, which is why there is a question as to what caused the packet.
If it was just someone doing a traceroute then the whole thread is silly
On Fri, 6 Oct 2000, Ryan Russell wrote:
> Tracert on Windows machines uses ICMP for it's traceroute implementation.
> On Tue, 3 Oct 2000, Max Vision wrote:
> > I'm not sure why you are seeing these traceroute packets (TTL=1), but I
> > should clarify that ICMP does not support the concept of "ports" except in
> > the payload of "port unreachable" packets.
More information about the Snort-users