Snort mailing list archives

(snort_decoder) Unknown Datagram decoding problem!


From: pingouin osmolateur <pingouin_osmolateur () yahoo fr>
Date: Mon, 21 Jul 2003 11:59:44 +0200

Hii everybody
I ve a lot of the following alert :

[**] [116:108:1] (snort_decoder) Unknown Datagram decoding problem! [**]
07/21-10:38:43.760054 192.168.3.2 -> x.x.x.x
ICMP TTL:128 TOS:0x0 ID:39603 IpLen:20 DgmLen:29
Type:3  Code:3  DESTINATION UNREACHABLE: PORT UNREACHABLE
ORIGINAL DATAGRAM TRUNCATED

I ve seen in a previous message that if i use config disable_decode_alerts
i ll never obtain this alerts but what the effect of this option.
It won't decode the next DESTINATION UNREACHABLE: PORT UNREACHABLE alert ?
thanks
AC



-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: