RE: Strange ping activity

["Anthony Buser" <ABuser () princelaw com>]

Yes, I've noticed a lot of ping zeros... in my case we've gotten 106 in
the past 2 days from 26 hosts.  Been getting a large amount of pings
overall (IDS169/ping-windows2000 and IDS152/Ping BSDtype as well).  So
much so that I've went ahead and blocked all pings on the firewall.  Yet
the pings havn't slowed down yet.

---
Tony Buser
Programmer/Analyst
Unconundrum, Inc. http://www.unconundrum.com



-----Original Message-----
From: Bob [mailto:bob () bangbang org]
Sent: Tuesday, May 22, 2001 10:50 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Strange ping activity


Has anyone else noticed a pile of IDS171/ping zero alerts in the past 
couple days? I'm up to over 400 alerts in the past 3 days from roughly 5

IPs and 2 seperate netblocks all belonging to Level 3 Communications.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users