Snort mailing list archives

Re: OT- Can some confirm a TOS bit setting for me.


From: Ashley Thomas <athomas () cc gatech edu>
Date: Thu, 23 Jan 2003 15:00:34 -0500

I seems to be right. Can you give a hex dump of the packet ?

tcpdump -x



David E. Gianndrea wrote:

Im using a packet generator to create packets with what I believe is the IP precedence bits set to critical. Does this tcpdump trace indicate the correct
bits being set?

dhcp61-0.4671 > 10.200.61.0.3000: udp 160 [tos 0x5] (ttl 125, id 44882, len 188) dhcp61-0.4671 > 10.200.61.0.3000: udp 160 [tos 0x5] (ttl 125, id 44883, len 188) dhcp61-0.4671 > 10.200.61.0.3000: udp 160 [tos 0x5] (ttl 125, id 44884, len 188) dhcp61-0.4671 > 10.200.61.0.3000: udp 160 [tos 0x5] (ttl 125, id 44885, len 188) dhcp61-0.4671 > 10.200.61.0.3000: udp 160 [tos 0x5] (ttl 125, id 44886, len 188)


Thanks in advance.




--
Ashley Thomas
Research scientist
College of Computing
Georgia Tech.




-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: