RE: Snort 1.8.6 crashes after Ping of Death

["McCammon, Keith" <Keith.McCammon () eadvancemed com>]

I believe that's a pcap failure, correct?  Anyone?

> -----Original Message-----
> From: Night-Stalker [mailto:theeaglesociety () netscape net]
> Sent: Thursday, July 11, 2002 9:08 AM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Snort 1.8.6 crashes after Ping of Death
>
>
> My Snort (version 1.8.6) (under Linux Mandrake 8.2) crashes 
> after one or two attacks with the DoS-Attack "Ping of Death", 
> produced with the "IDS Informer" from BLADE Software. This 
> Software is an IDS testing tool. Does anybody else have this problem?
> SYSLOG-ENTRY:
> <date> <time> <hostname> kernel: device eth0 left promiscuous mode
> <date> <time> <hostname> kernel: Oversized IP packet from <attacker>
>
>
> Thanks for your answers
>
> Addy
>
>
> __________________________________________________________________
> Your favorite stores, helpful shopping tools and great gift 
> ideas. Experience the convenience of buying online with 
> Shop@Netscape! http://shopnow.netscape.com/
>
> Get your own FREE, personal Netscape Mail account today at 
http://webmail.netscape.com/



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
PC Mods, Computing goodies, cases & more
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
PC Mods, Computing goodies, cases & more
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users