Snort mailing list archives
FYI - Possible cause for false positive - ICMP L3retriever Ping
From: Michael Gargiullo <gargiullo () comcast net>
Date: Wed, 12 Jun 2002 23:32:11 -0400
FYI - One cause for false positives with : alert : ICMP L3retriever Ping
From inside an ipchains firewall on a win2k server. I used M$ SQL Server Enterprise Manager to connect to an external SQL Server.
Who is General Failure, and why is he reading my Hard Disk. _______________________________________________________________ Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- redworm sanity check John Hally (Jun 08)
- FYI - Possible cause for false positive - ICMP L3retriever Ping Michael Gargiullo (Jun 12)
- Re: FYI - Possible cause for false positive - ICMP L3retriever Ping Chris Green (Jun 13)
- FYI - Possible cause for false positive - ICMP L3retriever Ping Michael Gargiullo (Jun 12)