ssp_conversion BAD IP protocol, why?

["Mike Koponick" <mkoponick () redhawk info>]

Hello all,

I seem to be having a reoccurring issue with Snort. I receive millions
of these messages in my snort log. I tried commenting out the SID (118)
in the gen-msg file, but no go. 

Does anyone know how I can get rid of these things? They seem to report
on packets that are typical on the network.

05/05-06:40:45.325111  [**] [118:1:1] (spp_conversation) Bad IP
protocol! [**] {UDP} xxx.xxx.xxx.xxx:514 -> xxx.xxx.xxx.xxx:514

Thanks in advance

Mike



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users