Snort mailing list archives

Re: ICMP PING speedera


From: Chris Green <cmg () uab edu>
Date: Thu, 18 Oct 2001 11:03:04 -0500

"Bruno Gimenes Pereti" <pereti () ump edu br> writes:

What does "ICMP PING speedera" do? 

http://www.speedera.com/nonflash_index.html - they try and find the
quickest path to a client for web site.  It's basically a proximity
sweep.

I have a lot of them and never woried about because they don't look
harmfull. 

agreed.

But yesterday my bind started dieing every hour and snort got just
this alert and "WEB-MISC http directory traversal"

I would look at DNS requests and bind logs.  What bind version are you
using?

-- 
Chris Green <cmg () uab edu>
A watched process never cores.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: