Re: IPv4 Warnings

[Fyodor <fygrave () tigerteam net>]

On Sun, Jul 01, 2001 at 12:43:40PM -0300, Marcelo Gulin wrote:
> Hi!
>
>   I'm running snort 1.7 in linux box with kernel 2.4.3.
>
>   The command line to start snort is:
>
>    ./snort -A full -c snort.conf -d -D -u snort -g snort -h 192.168.10.0/24 
> -s -M wrk.conf -i ppp0 -l /var/log/snort -v
>
>   Work good but my /var/log/messages is full (90%) of:
>
>    "Jul 1 12:58:23 gateway snort[757]: [!] WARNING: Not IPv4 datagram! ([ver: 
> 0x2][len: 0x2e2e])"
>
>   what that messages means?

Some corrupted/strange/odd datagram has been received. Although len
0x2e2e looks _DODGY_! :)


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users