Bad Traffic Same SRC/DST PROTO106 QNX???

[counter.spy () gmx de]

Snort generated this alert:
[**] [1:527:2] BAD TRAFFIC same SRC/DST [**]
[Classification: Potentially Bad Traffic] [Priority: 2]
02/04-12:36:54.498592 0.0.0.0 -> 0.0.0.0
PROTO106 TTL:255 TOS:0x0 ID:0 IpLen:20 DgmLen:74

Very interesting, this one. The event occured when we checked out QNX (cool
OS), so I could figure out where it came from, when I checked with iana.org.

But I could not find any useful details about Proto 106.
Can anybody tell me what Proto 106 QNX (Reference "Hunter" hunter () qnx com)
actually does?

If not, I think I will email Mr. Hunter, but I thought some users could
possibly see this alert, too, wondering what it is all about.

Greetings, 
D. Liesen

-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users