Snort mailing list archives

Please Explain


From: "Muscat, Tyrone J." <MUSCATTJ () wattsind com>
Date: Thu, 18 Oct 2001 15:20:07 -0400

I am new to IDS...if any one could explain the following it would be
helpful....I seem to be seeing a lot of this traffic....

Let me know if this is correct:
207.140.21.40 trys to contact 130.3.10.234
12.125.46.105(Is this a router???) tells 207.140.21.40 that 130.3.10.234 is
unavailable

[**] [1:399:2] ICMP Destination Unreachable (Host Unreachable) [**]
10/17-10:51:06.754880 0:2:FD:1E:25:ED -> 0:1:2:63:67:73 type:0x800 len:0x46
12.125.46.105 -> 207.140.21.40 ICMP TTL:254 TOS:0x0 ID:38068 IpLen:20
DgmLen:56
Type:3  Code:1  DESTINATION UNREACHABLE: HOST UNREACHABLE
** ORIGINAL DATAGRAM DUMP:
207.140.21.40:137 -> 130.3.10.234:137 UDP TTL:126 TOS:0x0 ID:16995 IpLen:20
DgmLen:96
Len: 76
** END OF DUMP


Ty Muscat 
Watt Regulator 
815 Chestnut Street 
North Andover, MA 01845 
Phone: 978-689-6036 
Fax: 978-689-6115 



Current thread: