Re: same SRC/DST

["James" <the_saint_james () yahoo com>]

Thanks ! The gateway is running an IOS that is fixed for this. I reconfiged,
next time this happens I will get a MAC address.


"Ask the plants of the earth and they will teach you." Job 12:8

----- Original Message -----
From: "Kyle R Maxwell" <kylemaxwell () yahoo com>
To: "James" <the_saint_james () yahoo com>; <snort-users () lists sourceforge net>
Sent: Tuesday, December 25, 2001 8:57 AM
Subject: Re: [Snort-users] same SRC/DST


> Looks like a Land attack (Google for land.c). You probably want to
> watch for the whole packet to get the MAC addresses and make sure that
> such an attack is not being launched from one of your (possibly
> compromised) machines.



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users