Snort mailing list archives
Re: Fw: BAD TRAFFIC same SRC/DST
From: Saint James <the_saint_james () yahoo com>
Date: Tue, 12 Feb 2002 00:08:51 -0800 (PST)
Grabbed the MAC address on these,
it is not a local router for either.
James here..... I can see how this statement was confusing. I do realize layer 2 is always local/LAN and does not "follow" the IP. I've never seen my Snort box, my office is 100 miles away from where it sniffs. Not till I got out the network maps did I realize I was assuming the wrong routers/MACS. Once I was looking in the right place, the DST (MAC) resolves to the Ethernet on the border router. That makes more sence. __________________________________________________ Do You Yahoo!? Send FREE Valentine eCards with Yahoo! Greetings! http://greetings.yahoo.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Fw: BAD TRAFFIC same SRC/DST james (Feb 11)
- Re: Fw: BAD TRAFFIC same SRC/DST Saint James (Feb 12)