Re: Snort FAQ 1.8

[Blake Frantz <blake () mc net>]

The ICMP packet returns the original Internet header *AND* the first 64
bits data bits.

-Blake


================================================================= 
The Government, like diapers, should be replaced regularly, and
often for the same reasons. 

On Tue, 10 Jul 2001, Ramin Alidousti wrote:

> The answer of 4.8 suggests that the ICMP carries the first
> 64 _bytes_ of the original datagram. I believe that it should
> be "the first 64 data _bits_" :-)
>
> Ramin
>
> On Mon, Jul 09, 2001 at 10:30:15PM -0700, Dragos Ruiu wrote:
>
> > Send me your complaints. :-)
> > Or translations...
> >
> > cheers,
> > --dr
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users