Snort mailing list archives
L3Retriever Pings?
From: "Robinson, Eric R." <erobinson () dot state nv us>
Date: Mon, 18 Mar 2002 16:56:29 -0800
I've looked around and have not found a decent description of L3Retriever pings or why they are anything to get worked up about. From looking at icmp.rules, it looks like they are normal echo requests with "ABCDEFGHIJKLMNOPQRSTUVWABCDEFGHI" in each packet. I fail to see why this is anything to warrant alerts. Can somebody clear this up? --Eric _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- L3Retriever Pings? Robinson, Eric R. (Mar 18)