Snort mailing list archives
Please Explain
From: "Muscat, Tyrone J." <MUSCATTJ () wattsind com>
Date: Thu, 18 Oct 2001 15:20:07 -0400
I am new to IDS...if any one could explain the following it would be helpful....I seem to be seeing a lot of this traffic.... Let me know if this is correct: 207.140.21.40 trys to contact 130.3.10.234 12.125.46.105(Is this a router???) tells 207.140.21.40 that 130.3.10.234 is unavailable [**] [1:399:2] ICMP Destination Unreachable (Host Unreachable) [**] 10/17-10:51:06.754880 0:2:FD:1E:25:ED -> 0:1:2:63:67:73 type:0x800 len:0x46 12.125.46.105 -> 207.140.21.40 ICMP TTL:254 TOS:0x0 ID:38068 IpLen:20 DgmLen:56 Type:3 Code:1 DESTINATION UNREACHABLE: HOST UNREACHABLE ** ORIGINAL DATAGRAM DUMP: 207.140.21.40:137 -> 130.3.10.234:137 UDP TTL:126 TOS:0x0 ID:16995 IpLen:20 DgmLen:96 Len: 76 ** END OF DUMP Ty Muscat Watt Regulator 815 Chestnut Street North Andover, MA 01845 Phone: 978-689-6036 Fax: 978-689-6115
Current thread:
- Please Explain Muscat, Tyrone J. (Oct 18)