Snort mailing list archives
Type:11 Code:0 TTL EXCEEDED IN TRANSIT
From: "Franco Catena" <facatena () surson com br>
Date: Thu, 10 Jun 2004 08:13:42 -0300
Personal good morning, Have just installed GATEKEEPER in the place of the guardian and I was VERY SATISFIED with the result.. It is not a script.. . Good the Case is that the snort comes me report the it ALERTS BELOW in my INTERNAL network. Will that be a FALSE one POSITIVE or anybody this getting to pass for IPTABLES and arriving my net????? THE ONE what can be? [**] [1:449:4] ICMP Time-To-Live Exceeded in Transit [**] [Classification: Misc activity] [Priority: 3] 06/10-00:31:01.577828 200.207.199.29 -> 192.168.100.1 ICMP TTL:253 TOS:0x0 ID:0 IpLen:20 DgmLen:56 Type:11 Code:0 TTL EXCEEDED IN TRANSIT Franco Catena http://www.surson.com.br tel 011-55390073 cel:82021562 MSN: facdavilla () hotmail com ICQ: 24755602 _____ I've stopped 5.634 spam messages. You can too! One month FREE spam protection at HYPERLINK "http://www.cloudmark.com/spamnet?v1&rc="www.cloudmark.com HYPERLINK "http://www.cloudmark.com/spamnet?v1&rc="Cloudmark SpamNet - Join the fight against spam! -- Mensagens enviadas estao livres de vírus. Verificado por AVG Anti-Vírus (http://www.grisoft.com). Version: 7.0.250 / Virus Database: 263.1.2 - Release Date: 7/6/2004
Current thread:
- Type:11 Code:0 TTL EXCEEDED IN TRANSIT Franco Catena (Jun 10)