Re: (snort_decoder) WARNING: IP dgm len < IP Hdr len!

[snort user <snort.user () gmail com>]

a malformed ip packet
while decoding the packet, it is found that the ip header length is greater 
than ip datagram length
(based on the ip header values)


On 9/19/05, Ron Jenkins <rjenkins () dibr net> wrote:
>  Does any have information on the below alert:
>
>  *(snort_decoder) WARNING: IP dgm len < IP Hdr len!*
>
>  Thanks…
>
>  Ron Jenkins (SnortCP, MCNE, CNE6, MCP, CCNA, CCEA)
> Senior Architect
> Data Integrity, LLC
> "We Integrate People with Solutions"
> 1724 Dallas Drive
> Suite 11
> Baton Rouge, La 70806
> Office. 225.927.8030
> Fax. 225.927.8033
> Cell225.931.1632
>
> Email. rjenkins () dibr net
> Web. http://www.dibr.net
>
> (Aanval Reseller and Technology Partner)
>
> http://www.aanval.com/tour/dibr