Re: icmp L3 Retriever Ping

[Chris Green <cmg () uab edu>]

"JC Rodz" <nyjcr () hotmail com> writes:

> Hi,
>
> Does anyone know what does Signature "ICMP L3retriever Ping" means.
> It looks like a regular ping, I'm not user whay is coming up. I
> received 336 instances within a 4 hour period.
> all from the same source and the same destination.

http://www.ultraviolet.org/mail-archives/snort-users.2001/0516.html
gives one possible explaination


-- 
Chris Green <cmg () uab edu>
Laugh and the world laughs with you, snore and you sleep alone.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users