Snort mailing list archives

FYI - Possible cause for false positive - ICMP L3retriever Ping

From: Michael Gargiullo <gargiullo () comcast net>
Date: Wed, 12 Jun 2002 23:32:11 -0400

FYI - One cause for false positives with :

alert : ICMP L3retriever Ping

From inside an ipchains firewall on a win2k server.  I used M$ SQL Server Enterprise Manager to connect to an external 
SQL Server.







Who is General Failure, and why is he reading my Hard Disk.  

_______________________________________________________________

Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread:

redworm sanity check John Hally (Jun 08)
- FYI - Possible cause for false positive - ICMP L3retriever Ping Michael Gargiullo (Jun 12)
  - Re: FYI - Possible cause for false positive - ICMP L3retriever Ping Chris Green (Jun 13)