Snort mailing list archives
ICMP Large Packets Alerts
From: Kevin L Pawloski <kpawloski () juno com>
Date: Fri, 22 Mar 2002 11:26:37 -0800
I'm receiving a flood of alerts from Digital Island that pings my DNS servers. This ping comes in from 100+ different IPs all owned by Digital Island who own the datacenter I have a few boxes in. Is there a way to filter out packets with this beginning in them for Snort? mailto:ops () digisle com for questions This ICMP ECHO REQUEST/REPLY is part of the real-time network monitoring performed by Digital Island Inc. It is not an attack. If you havequestions please contact ops () digisle com Thanks! Kevin ________________________________________________________________ GET INTERNET ACCESS FROM JUNO! Juno offers FREE or PREMIUM Internet access for less! Join Juno today! For your FREE software, visit: http://dl.www.juno.com/get/web/. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ICMP Large Packets Alerts Kevin L Pawloski (Mar 22)
- <Possible follow-ups>
- RE: ICMP Large Packets Alerts Wirth, Jeff (Mar 22)