Snort mailing list archives
Re: ICMP PING speedera
From: Chris Green <cmg () uab edu>
Date: Thu, 18 Oct 2001 11:03:04 -0500
"Bruno Gimenes Pereti" <pereti () ump edu br> writes:
What does "ICMP PING speedera" do?
http://www.speedera.com/nonflash_index.html - they try and find the quickest path to a client for web site. It's basically a proximity sweep.
I have a lot of them and never woried about because they don't look harmfull.
agreed.
But yesterday my bind started dieing every hour and snort got just this alert and "WEB-MISC http directory traversal"
I would look at DNS requests and bind logs. What bind version are you using? -- Chris Green <cmg () uab edu> A watched process never cores. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Configure MySQL for multiple snort sensors Joe Pampel (Oct 17)
- <Possible follow-ups>
- RE: Configure MySQL for multiple snort sensors Erwin Fok (Oct 18)
- ICMP PING speedera Bruno Gimenes Pereti (Oct 18)
- Re: ICMP PING speedera Chris Green (Oct 18)
- Re: ICMP PING speedera Bruno Gimenes Pereti (Oct 18)
- Re: ICMP PING speedera Byron York (Oct 18)
- ICMP PING speedera Bruno Gimenes Pereti (Oct 18)
- Re: Configure MySQL for multiple snort sensors james (Oct 18)
- Re: Configure MySQL for multiple snort sensors A.J. Weinzettel (Oct 18)
- Re: Configure MySQL for multiple snort sensors roman (Oct 19)