Snort mailing list archives

Newbie "what does this mean" question


From: "Ian Hunter" <ihunter () ix netcom com>
Date: Fri, 18 Oct 2002 14:57:38 -0400

I'm running snort-1.8.4-3 on SuSE 8.0, and I'm getting TONS of messages that
look like:

Oct 18 14:38:19 lucy snort: [1:485:2] ICMP Destination Unreachable
(Communication Administratively Prohibited) [Classification: Misc activity]
[Priority: 3]: {ICMP} 130.59.33.17 -> 192.168.1.20

The FAQ says ignore it unless there are lots, and if there are lots, figure
out where they're coming from. ???

What causes this?

Thanks!



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: