Where is my ICMP ID and ICMP Seq with ICMP Timestamp, AddressMask, Info output?

["Ofir Arkin" <ofir () sys-security com>]

I was replacing old examples with Snort with new once, while I have
encountered a little problem :)

With ICMP Echo request and reply messages snort prints the ICMP ID and the
ICMP Sequence numbers.

But they ARE NOT printed with ICMP Timestamp, AddressMask, Information
Request.
All using ICMP ID and ICMP Sequence numnbers as part of its

Marty can you change that?


Ofir Arkin [ofir () sys-security com]
Founder
The Sys-Security Group
http://www.sys-security.com
PGP CC2C BE53 12C6 C9F2 87B1 B8C6 0DFA CF2D D360 43FA


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users