redirect host

["Semerjian, Ohanes" <Semerjian.Ohanes () wcom com au>]

I'm cing redirect host alert logged by one of snort sensors. Is anyone know
of any case that this signature could be triggered by a legitimate network
traffic and need not be an attack like DoS...! The payload shows an IP
address and the destination is a whole net segment (x.y.z.FF)


Best Regards

Ohanes Semerjian