riddle me this....

["larosa, vjay" <larosa_vjay () emc com>]

What kind of packet gets sent across the network with both the DF and MF
bits set? My BAD TAFFIC bad frag bits rule keeps getting set off by hosts on
my network. Shouldn't a switch/router drop packets like this and respond
with an ICMP error message to the originator? The UDP  packet size is 1520
(20 byte IP header, 1500 byte payload)
Could this be fragroute(r)?

Thanks!

vjl

_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: bandwidth () sourceforge net
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users