What Rule??

["Akerson, Jeff" <jakerson () Bemis com>]

Hi All

Can anyone tell me what is triggering this:

[**] [116:108:1] (snort_decoder) Unknown Datagram decoding problem! [**]
02/16-03:48:22.800777 10.67.8.137 -> 10.67.252.20
ICMP TTL:128 TOS:0x0 ID:32253 IpLen:20 DgmLen:31
Type:3  Code:3  DESTINATION UNREACHABLE: PORT UNREACHABLE
ORIGINAL DATAGRAM TRUNCATED

Is this coming from a rule or a preprocessor?

10.67.8.137 is a data collector for IP based security cameras 10.67.252.20
is a camera

Thanks!
Jeff




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users