No subject


Thu Nov 23 16:36:19 EST 2017


traceroute, which is why there is a question as to what caused the packet.  
If it was just someone doing a traceroute then the whole thread is silly
:)

Max

On Fri, 6 Oct 2000, Ryan Russell wrote:
> Tracert on Windows machines uses ICMP for it's traceroute implementation.
> 				Ryan
> 
> On Tue, 3 Oct 2000, Max Vision wrote:
> > I'm not sure why you are seeing these traceroute packets (TTL=1), but I
> > should clarify that ICMP does not support the concept of "ports" except in
> > the payload of "port unreachable" packets.
> > 




More information about the Snort-users mailing list